# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=573

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 574

---

## [Ingest node disc usage keeps rising](https://discuss.elastic.co/t/ingest-node-disc-usage-keeps-rising/284431)

<div class="topic-metadata">

**Author:** [@Tadija](https://discuss.elastic.co/u/Tadija)\
**Replies:** 6\
**Last updated:** [September 20, 2021, 6:05am UTC](https://discuss.elastic.co/t/ingest-node-disc-usage-keeps-rising/284431 "2021-09-20T06:05:42Z")

</div>

I've created a new elastic cloud deployment 7.14.x - Hot tier contains 1 node with 2 GB disc, Warm tier 1 node 320 GB disc. I wont do any document/index updating, a human will occasionally check logs via Kibana. I've se…

---

## [Elasticsearch snapshot and restore best practices](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-best-practices/284141)

<div class="topic-metadata">

**Author:** [@eolver](https://discuss.elastic.co/u/eolver)\
**Replies:** 9\
**Last updated:** [September 20, 2021, 5:59am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-and-restore-best-practices/284141 "2021-09-20T05:59:37Z")

</div>

Hi All, I want to know the best way, to store elastic data for recovery. Currently we had each cluster hosted in azure and the cluster backed up daily using RSV. However we wanted to do more frequently snapshots which…

---

## [Date histogram for Bucket Aggregation](https://discuss.elastic.co/t/date-histogram-for-bucket-aggregation/284592)

<div class="topic-metadata">

**Author:** [@Manisekhar\_techo](https://discuss.elastic.co/u/Manisekhar_techo)\
**Replies:** 0\
**Last updated:** [September 20, 2021, 5:43am UTC](https://discuss.elastic.co/t/date-histogram-for-bucket-aggregation/284592 "2021-09-20T05:43:07Z")

</div>

Hi, I have a terms bucket aggregation on a field. is there a way to get the date histogram for each of the listed Bucket items received from terms aggregation. Something like this. this isn't working but just to give t…

---

## [How i can calculate the cluster nodes size like RAM, CPU and Disk](https://discuss.elastic.co/t/how-i-can-calculate-the-cluster-nodes-size-like-ram-cpu-and-disk/283933)

<div class="topic-metadata">

**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\
**Replies:** 9\
**Last updated:** [September 20, 2021, 5:14am UTC](https://discuss.elastic.co/t/how-i-can-calculate-the-cluster-nodes-size-like-ram-cpu-and-disk/283933 "2021-09-20T05:14:56Z")

</div>

HI, I am trying to figure how should I calculate my nodes size, its RAM, CPU, and Disk. If I have data of around 10G. On basis of what I should calculate nodes size. Can anyone guide me, please?

---

## [NEST indexing missing documents without errors](https://discuss.elastic.co/t/nest-indexing-missing-documents-without-errors/284370)

<div class="topic-metadata">

**Author:** [@Vyil](https://discuss.elastic.co/u/Vyil)\
**Replies:** 1\
**Last updated:** [September 20, 2021, 4:58am UTC](https://discuss.elastic.co/t/nest-indexing-missing-documents-without-errors/284370 "2021-09-20T04:58:46Z")

</div>

Hi there, So i'm trying to index around 636k documents into my ES node. I have a 1 node cluster where i end up with around 550k/636k documents, and i don't get any error messages at all while indexing. Then i try on my…

---

## [Viewing JSON result or Object of ES query?](https://discuss.elastic.co/t/viewing-json-result-or-object-of-es-query/284420)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 0\
**Last updated:** [September 16, 2021, 3:35pm UTC](https://discuss.elastic.co/t/viewing-json-result-or-object-of-es-query/284420 "2021-09-16T15:35:50Z")

</div>

I apologize if this is a stupid question, newcomer here. I have a ES cluster that I'm trying to search through and view the result in JSON format. Right now, this is what I'm doing in a very basic example. …

---

## [Container vs Dedicated Instances Benchmarks](https://discuss.elastic.co/t/container-vs-dedicated-instances-benchmarks/284460)

<div class="topic-metadata">

**Author:** [@ithfdemir](https://discuss.elastic.co/u/ithfdemir)\
**Replies:** 1\
**Last updated:** [September 20, 2021, 4:49am UTC](https://discuss.elastic.co/t/container-vs-dedicated-instances-benchmarks/284460 "2021-09-20T04:49:08Z")

</div>

Hi, I have an Elasticsearch cluster (71 Nodes (64 data + 7 master) running in 16 dedicated servers). I'm considering about containerization for this running cluster. Is it possible? If yes, is there any benchmarks or no…

---

## [Search all indices and exclude one](https://discuss.elastic.co/t/search-all-indices-and-exclude-one/284498)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 2\
**Last updated:** [September 20, 2021, 4:39am UTC](https://discuss.elastic.co/t/search-all-indices-and-exclude-one/284498 "2021-09-20T04:39:06Z")

</div>

How can we search all indices across elastic search and exlude one from the list. Something like Nest.Indices search = "\_all,-kibana"

---

## [Nest returning results as IReadOnlyCollection, how to change it so it is usable?](https://discuss.elastic.co/t/nest-returning-results-as-ireadonlycollection-how-to-change-it-so-it-is-usable/284512)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 0\
**Last updated:** [September 17, 2021, 7:40pm UTC](https://discuss.elastic.co/t/nest-returning-results-as-ireadonlycollection-how-to-change-it-so-it-is-usable/284512 "2021-09-17T19:40:31Z")

</div>

Using elasticsearch, I'm trying to add my hit results into a list after they are returned, like this: var lstModels = new SearchResult\<mdl.Event\>(); var searchResponse = Event.client.Search\<mdl.Event\>(s =\> s …

---

## [Elastic Search Index Mapping](https://discuss.elastic.co/t/elastic-search-index-mapping/284511)

<div class="topic-metadata">

**Author:** [@yun983](https://discuss.elastic.co/u/yun983)\
**Replies:** 7\
**Last updated:** [September 20, 2021, 4:35am UTC](https://discuss.elastic.co/t/elastic-search-index-mapping/284511 "2021-09-20T04:35:58Z")

</div>

NEED HELP...... I am trying to add a an array of dictionaries as a field in existing elastic search cluster. Previously my data looked like this: "businessBureauId": "3699", "businessRecordId": "3699", "businessR…

---

## [Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-es-7-2021.09.17\]\[0\] primary shard is not active Timeout: \[1m\], request: \[BulkShardRequest \[\[.monitoring-es-7-2021.09.17\]\[0\]\] containing \[463\] requests\] ... 11 more](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-unavailableshardsexception-monitoring-es-7-2021-09-17-0-primary-shard-is-not-active-timeout-1m-request-bulkshardrequest-monitoring-es-7-2021-09-17-0-containing-463-requests-11-more/284520)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 1\
**Last updated:** [September 20, 2021, 4:34am UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-unavailableshardsexception-monitoring-es-7-2021-09-17-0-primary-shard-is-not-active-timeout-1m-request-bulkshardrequest-monitoring-es-7-2021-09-17-0-containing-463-requests-11-more/284520 "2021-09-20T04:34:42Z")

</div>

How to troubleshoot the following? Caused by: org.elasticsearch.action.UnavailableShardsException: \[.monitoring-es-7-2021.09.17\]\[0\] primary shard is not active Timeout: \[1m\], request: \[BulkShardRequest \[\[.monitoring-es-…

---

## [Can't scale ElasticSearch cluster](https://discuss.elastic.co/t/cant-scale-elasticsearch-cluster/284577)

<div class="topic-metadata">

**Author:** [@mxmtrms](https://discuss.elastic.co/u/mxmtrms)\
**Replies:** 1\
**Last updated:** [September 20, 2021, 4:17am UTC](https://discuss.elastic.co/t/cant-scale-elasticsearch-cluster/284577 "2021-09-20T04:17:35Z")

</div>

Hello everyone! Prerequisites For the last year my team and I have been developing a project in which we decided to use ElasticSearch. In the early stages of development, we used a simple single-node cluster that more …

---

## [Zabbix 5.4, unable send data to Elastic Search (date field)](https://discuss.elastic.co/t/zabbix-5-4-unable-send-data-to-elastic-search-date-field/284585)

<div class="topic-metadata">

**Author:** [@denisb](https://discuss.elastic.co/u/denisb)\
**Replies:** 0\
**Last updated:** [September 20, 2021, 12:34am UTC](https://discuss.elastic.co/t/zabbix-5-4-unable-send-data-to-elastic-search-date-field/284585 "2021-09-20T00:34:49Z")

</div>

Hello everybody. There is zabbix 5.4 and Elastic Search 7.11.2. Problem: Can't send data over zabbix\_sender to the element type "zabbix trapper" Error: elastic\_writer\_flush() cannot send data to elasticsearch: index…

---

## [Is there a .NET client for VSCode?](https://discuss.elastic.co/t/is-there-a-net-client-for-vscode/284215)

<div class="topic-metadata">

**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\
**Replies:** 4\
**Last updated:** [September 19, 2021, 10:55pm UTC](https://discuss.elastic.co/t/is-there-a-net-client-for-vscode/284215 "2021-09-19T22:55:22Z")

</div>

I am trying to create a file to write ElasticSearch queries from C#. I have seen that there is are 2 official ElasticSearch clients for .NET (Introduction | Elasticsearch.Net and NEST: the .NET clients \[7.x\] | Elastic) h…

---

## [Lifecycle policy setting index read-only even with the option disabled](https://discuss.elastic.co/t/lifecycle-policy-setting-index-read-only-even-with-the-option-disabled/284572)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [September 19, 2021, 4:07pm UTC](https://discuss.elastic.co/t/lifecycle-policy-setting-index-read-only-even-with-the-option-disabled/284572 "2021-09-19T16:07:43Z")

</div>

Hello, I have a hot-warm architecture and a couple of ILM that will move the index from the hot nodes to the warm nodes based on the age. I have an index that is created daily and is moved to the warm nodes after 7 day…

---

## [Remove the number from the field, and only remain letter](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548)

<div class="topic-metadata">

**Author:** [@zaidsalah](https://discuss.elastic.co/u/zaidsalah)\
**Replies:** 5\
**Last updated:** [September 19, 2021, 10:23am UTC](https://discuss.elastic.co/t/remove-the-number-from-the-field-and-only-remain-letter/284548 "2021-09-19T10:23:35Z")

</div>

remove the number from the field, only I want letter . in my PDF have table contain name and id, id is number when I index and using ingest attachment pipeline number will store as well like this id name 123 user…

---

## [Handling of gigantic unsearchable fields](https://discuss.elastic.co/t/handling-of-gigantic-unsearchable-fields/284552)

<div class="topic-metadata">

**Author:** [@typewar](https://discuss.elastic.co/u/typewar)\
**Replies:** 0\
**Last updated:** [September 19, 2021, 5:52am UTC](https://discuss.elastic.co/t/handling-of-gigantic-unsearchable-fields/284552 "2021-09-19T05:52:20Z")

</div>

Hello. I was wondering what good methods for handling gigantic fields are? Let's say a document has an array field for unique visitors of a post, so it will save the ip or the username in this array. If the post now …

---

## ["suggest\_mode": "always" doesn't work for term suggester](https://discuss.elastic.co/t/suggest-mode-always-doesnt-work-for-term-suggester/284537)

<div class="topic-metadata">

**Author:** [@Tomohiro](https://discuss.elastic.co/u/Tomohiro)\
**Replies:** 0\
**Last updated:** [September 18, 2021, 7:56am UTC](https://discuss.elastic.co/t/suggest-mode-always-doesnt-work-for-term-suggester/284537 "2021-09-18T07:56:07Z")

</div>

Hello everyone. I'm a rookie cloud developer who is working on a full stack web service. We are introducing elasticsearch to fetch suggestions of movie title. The problem is suggestions couldn't be fetched when the que…

---

## [DSL Query to search in message field for some value and it must not contain something else](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450)

<div class="topic-metadata">

**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\
**Replies:** 1\
**Last updated:** [September 18, 2021, 7:35am UTC](https://discuss.elastic.co/t/dsl-query-to-search-in-message-field-for-some-value-and-it-must-not-contain-something-else/284450 "2021-09-18T07:35:25Z")

</div>

Trying to come up with a query to search "message" field for something like "Hello" and also the field must not contain strings like "Test" "TestProcess". "UpdatingTestProcess" Below are sample messages: Message: Hel…

---

## [Disk partitioning for Elasticsearch](https://discuss.elastic.co/t/disk-partitioning-for-elasticsearch/284459)

<div class="topic-metadata">

**Author:** [@ithfdemir](https://discuss.elastic.co/u/ithfdemir)\
**Replies:** 1\
**Last updated:** [September 18, 2021, 7:29am UTC](https://discuss.elastic.co/t/disk-partitioning-for-elasticsearch/284459 "2021-09-18T07:29:08Z")

</div>

Hi, I have SAS and SSD disk coming from data center's pool. I want to setup my Elasticsearch cluster with those disks. I want to use SSDs only for recent 1 week and SAS for past. Is it possible? This setup will be ded…

---

## [Stopwords(Elasticsearch7.14+ fscrawler2.7)](https://discuss.elastic.co/t/stopwords-elasticsearch7-14-fscrawler2-7/284053)

<div class="topic-metadata">

**Author:** [@Tarik\_Bouhasse](https://discuss.elastic.co/u/Tarik_Bouhasse)\
**Replies:** 6\
**Last updated:** [September 18, 2021, 1:29am UTC](https://discuss.elastic.co/t/stopwords-elasticsearch7-14-fscrawler2-7/284053 "2021-09-18T01:29:49Z")

</div>

how to configure stopwords. I am in fscrawler2.7 and Elasticsearch7.14

---

## [Failure: \[lang\_ident\_neural\_network\] model could not find non-null numerical array named \[embedding\_vector\]](https://discuss.elastic.co/t/failure-lang-ident-neural-network-model-could-not-find-non-null-numerical-array-named-embedding-vector/284507)

<div class="topic-metadata">

**Author:** [@ccat](https://discuss.elastic.co/u/ccat)\
**Replies:** 1\
**Last updated:** [September 17, 2021, 8:38pm UTC](https://discuss.elastic.co/t/failure-lang-ident-neural-network-model-could-not-find-non-null-numerical-array-named-embedding-vector/284507 "2021-09-17T20:38:21Z")

</div>

Hi, I am running an inference processor for language identification on a text field (model ID: lang\_ident\_model\_1). The processor works when I test it with sample data using the \_ingest REST endpoint with \_simulate. …

---

## [How to decrease the response time for the first time call of Elasticsearch query?](https://discuss.elastic.co/t/how-to-decrease-the-response-time-for-the-first-time-call-of-elasticsearch-query/284361)

<div class="topic-metadata">

**Author:** [@pavan\_kalyan](https://discuss.elastic.co/u/pavan_kalyan)\
**Replies:** 5\
**Last updated:** [September 17, 2021, 7:54pm UTC](https://discuss.elastic.co/t/how-to-decrease-the-response-time-for-the-first-time-call-of-elasticsearch-query/284361 "2021-09-17T19:54:32Z")

</div>

sample query here, could anyone please help me to solve this issue. query = { "size": 20, "\_source": { "includes": \[ "xyz", "abc", 'dgs'\], }, "query": { "bool": { "mus…

---

## [Native controller process has stopped](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505)

<div class="topic-metadata">

**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Replies:** 1\
**Last updated:** [September 17, 2021, 6:09pm UTC](https://discuss.elastic.co/t/native-controller-process-has-stopped/284505 "2021-09-17T18:09:03Z")

</div>

I am not able to start the elasticsearch service, I am getting the following errors. I could find many discussions with the same error but didn't find solution in any of them. Below are the logs, can anyone please provi…

---

## [How to use ingest attachment processor in elastic cloud](https://discuss.elastic.co/t/how-to-use-ingest-attachment-processor-in-elastic-cloud/284455)

<div class="topic-metadata">

**Author:** [@zaidsalah](https://discuss.elastic.co/u/zaidsalah)\
**Replies:** 6\
**Last updated:** [September 17, 2021, 4:33pm UTC](https://discuss.elastic.co/t/how-to-use-ingest-attachment-processor-in-elastic-cloud/284455 "2021-09-17T16:33:12Z")

</div>

how to use ingest attachment processor in elastic cloud Elastic search is not in local i am using free trial cloud when i run this in dev tools PUT \_ingest/pipeline/attachment { "description" : "Extract attachment i…

---

## [How can I use "minimum\_should\_match" correctly?](https://discuss.elastic.co/t/how-can-i-use-minimum-should-match-correctly/284466)

<div class="topic-metadata">

**Author:** [@bigwang](https://discuss.elastic.co/u/bigwang)\
**Replies:** 6\
**Last updated:** [September 17, 2021, 2:44pm UTC](https://discuss.elastic.co/t/how-can-i-use-minimum-should-match-correctly/284466 "2021-09-17T14:44:19Z")

</div>

Are these two syntaxes not equivalent? first GET doc\_data/\_search { "query": { "match": { "title": { "query": "农村信用银行", "minimum\_should\_match": 2 } } } } second: GET doc\_data…

---

## [Search first in one field and if not return result, search in all document](https://discuss.elastic.co/t/search-first-in-one-field-and-if-not-return-result-search-in-all-document/284047)

<div class="topic-metadata">

**Author:** [@castano\_guill](https://discuss.elastic.co/u/castano_guill)\
**Replies:** 9\
**Last updated:** [September 17, 2021, 10:54am UTC](https://discuss.elastic.co/t/search-first-in-one-field-and-if-not-return-result-search-in-all-document/284047 "2021-09-17T10:54:35Z")

</div>

Hello, I´m new in the community. Currently I ingest PDF documents to an index in elastic, in those documents I add custom fields of various information (state, short way of referring to it, etc, ..) I want to change m…

---

## [Elastic Search query to get the list of documents with some minimum occurrence of a property](https://discuss.elastic.co/t/elastic-search-query-to-get-the-list-of-documents-with-some-minimum-occurrence-of-a-property/284476)

<div class="topic-metadata">

**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\
**Replies:** 0\
**Last updated:** [September 17, 2021, 10:50am UTC](https://discuss.elastic.co/t/elastic-search-query-to-get-the-list-of-documents-with-some-minimum-occurrence-of-a-property/284476 "2021-09-17T10:50:27Z")

</div>

I have a index with documents like this \[ { "customer\_id" : "123", "country": "USA", "department": "IT", "creation\_date" : "2021-06-23" ... }, { "customer\_id" : "123", "country": "USA", "depar…

---

## [Index Lifecycle Policies](https://discuss.elastic.co/t/index-lifecycle-policies/284351)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 8\
**Last updated:** [September 17, 2021, 10:33am UTC](https://discuss.elastic.co/t/index-lifecycle-policies/284351 "2021-09-17T10:33:39Z")

</div>

how to make logs deleted every 2 weeks?

---

## [Spark Elasticsearch: Append new elements to nested array of objects](https://discuss.elastic.co/t/spark-elasticsearch-append-new-elements-to-nested-array-of-objects/284457)

<div class="topic-metadata">

**Author:** [@Lokesh\_Loks](https://discuss.elastic.co/u/Lokesh_Loks)\
**Replies:** 0\
**Last updated:** [September 17, 2021, 8:05am UTC](https://discuss.elastic.co/t/spark-elasticsearch-append-new-elements-to-nested-array-of-objects/284457 "2021-09-17T08:05:36Z")

</div>

I have elasticsearch query to add new elements to a nested array of objects below POST /transactions/\_doc/1/\_update { "script": { "source": "ctx.\_source.transactions.addAll(params.transactions)", "pa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=572)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=574)
