# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=653

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 654

---

## [Missing results using query\_string wildcard query with rewrite top\_terms\_n](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680)

<div class="topic-metadata">

**Author:** [@carantunes](https://discuss.elastic.co/u/carantunes)\
**Replies:** 1\
**Last updated:** [May 3, 2021, 8:40am UTC](https://discuss.elastic.co/t/missing-results-using-query-string-wildcard-query-with-rewrite-top-terms-n/269680 "2021-05-03T08:40:25Z")

</div>

I'm using Elasticsearch version 7.1.1. I'm experiencing a weird behaviour. When using top\_terms\_n in order to obtain a score in wildcard query\_string queries almost all results are missing. Without top\_terms\_n I obtain…

---

## [Stopping Elasticsearch causes Windows Server to crash/restart](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608)

<div class="topic-metadata">

**Author:** [@mbalzary](https://discuss.elastic.co/u/mbalzary)\
**Replies:** 3\
**Last updated:** [May 3, 2021, 8:35am UTC](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608 "2021-05-03T08:35:00Z")

</div>

Hi, we installed Elasticsearch 7.10 on a Windows Server 2016. Only configuration changes made are regarding cluster.name and node.name. Elasticsearch can be started without a problem and runs, but when it is stopped it …

---

## [Authentication to realm default native failed - Password authentication failed for xyz](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed-for-xyz/271759)

<div class="topic-metadata">

**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 8:09am UTC](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed-for-xyz/271759 "2021-05-03T08:09:15Z")

</div>

Hi All, Elasticsearch-version-7.6.2 I have created xyz admin user for only monitoring the url. For that I have created one custom role and add that role into the user. Below is my role code with the name my\_admin\_role …

---

## [Cluster management: 2000+ open active shards](https://discuss.elastic.co/t/cluster-management-2000-open-active-shards/271868)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 30\
**Last updated:** [May 3, 2021, 6:35am UTC](https://discuss.elastic.co/t/cluster-management-2000-open-active-shards/271868 "2021-05-03T06:35:14Z")

</div>

Hello, I hope this messages finds you and your loved ones safe and healthy. I have a 3 node Elastic cluster with 2 data nodes and 1 voting node. Nodes are running Ubuntu 20.04.2 LTS with the stack at the latest current…

---

## [Can the index's roll alias be set dynamically？](https://discuss.elastic.co/t/can-the-indexs-roll-alias-be-set-dynamically/271748)

<div class="topic-metadata">

**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 5:42am UTC](https://discuss.elastic.co/t/can-the-indexs-roll-alias-be-set-dynamically/271748 "2021-05-03T05:42:54Z")

</div>

I use filebeat to add fields to dynamically generate indexes. index =\> "%{\[service\]}-%{+YYYY.MM.dd}" I configure the following index template to match the generated index { "index\_templates" : \[ { "name" :…

---

## [How to combine search results](https://discuss.elastic.co/t/how-to-combine-search-results/271730)

<div class="topic-metadata">

**Author:** [@Ruth\_Smith](https://discuss.elastic.co/u/Ruth_Smith)\
**Replies:** 1\
**Last updated:** [May 2, 2021, 6:22am UTC](https://discuss.elastic.co/t/how-to-combine-search-results/271730 "2021-05-02T06:22:03Z")

</div>

I'm using ES 7.1.2. I have indices of log records of customer logins, one index per day. I want to find a list of all customers who have not logged in the prior month. I know how to execute two aggregations, one which re…

---

## [json insert](https://discuss.elastic.co/t/json-insert/271891)

<div class="topic-metadata">

**Author:** [@pyeonzzang123](https://discuss.elastic.co/u/pyeonzzang123)\
**Replies:** 8\
**Last updated:** [May 3, 2021, 1:45am UTC](https://discuss.elastic.co/t/json-insert/271891 "2021-05-03T01:45:26Z")

</div>

I want to write the same c# code as the Python code below. But there was an error. I don’t' know the reason. python // import json import sys from elasticsearch import Elasticsearch from elasticsearch.helpers impor…

---

## [How to insert json data into elasticsearch](https://discuss.elastic.co/t/how-to-insert-json-data-into-elasticsearch/271921)

<div class="topic-metadata">

**Author:** [@pyeonzzang123](https://discuss.elastic.co/u/pyeonzzang123)\
**Replies:** 1\
**Last updated:** [May 3, 2021, 1:34am UTC](https://discuss.elastic.co/t/how-to-insert-json-data-into-elasticsearch/271921 "2021-05-03T01:34:23Z")

</div>

I want to write the same c# code as the Python code below. But there was an error. I don’t' know the reason. python ''' import json import time from elasticsearch import Elasticsearch from elasticsearch.helpers imp…

---

## [Why should I have to split index](https://discuss.elastic.co/t/why-should-i-have-to-split-index/271824)

<div class="topic-metadata">

**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\
**Replies:** 1\
**Last updated:** [May 2, 2021, 9:54pm UTC](https://discuss.elastic.co/t/why-should-i-have-to-split-index/271824 "2021-05-02T21:54:10Z")

</div>

Hi team I am newbie to the elastic search. While I am looking at static index settings I found index.number\_of\_routing\_shards there mentioned that it is used to split an index. After seeing this sentence I got some ques…

---

## [Is there a schema of API types (such as aggregations and pipeline processors) available somewhere?](https://discuss.elastic.co/t/is-there-a-schema-of-api-types-such-as-aggregations-and-pipeline-processors-available-somewhere/271829)

<div class="topic-metadata">

**Author:** [@Chance](https://discuss.elastic.co/u/Chance)\
**Replies:** 0\
**Last updated:** [April 30, 2021, 7:24pm UTC](https://discuss.elastic.co/t/is-there-a-schema-of-api-types-such-as-aggregations-and-pipeline-processors-available-somewhere/271829 "2021-04-30T19:24:06Z")

</div>

I'm putting together a package that's basically types for the official elasticsearch go client. I've gotten most of the queries done (I need to finish up the span set and a couple of others). Writing them out was rather …

---

## [Create multiple Elasticsearch processes on a single physical host](https://discuss.elastic.co/t/create-multiple-elasticsearch-processes-on-a-single-physical-host/271883)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 2\
**Last updated:** [May 2, 2021, 9:41pm UTC](https://discuss.elastic.co/t/create-multiple-elasticsearch-processes-on-a-single-physical-host/271883 "2021-05-02T21:41:44Z")

</div>

I'm planning to use single node cluster for my application deployment. We have more use cases of scaling vertically than adding a new physical host. Elasticsearch is planning to deprecate multi node path in near future. …

---

## [Curator timeout\_override parameter not working for snapshot\_delete action](https://discuss.elastic.co/t/curator-timeout-override-parameter-not-working-for-snapshot-delete-action/271473)

<div class="topic-metadata">

**Author:** [@shivpathak23](https://discuss.elastic.co/u/shivpathak23)\
**Replies:** 2\
**Last updated:** [May 2, 2021, 4:52pm UTC](https://discuss.elastic.co/t/curator-timeout-override-parameter-not-working-for-snapshot-delete-action/271473 "2021-05-02T16:52:21Z")

</div>

Hello community, I am using curator for elasticsearch snapshot deletion, since couple of days I started observing that snapshot deleting took longer time than previous in short (more than 5 minutes) since then my curato…

---

## [How to resolve: Exception in thread "main" java.nio.file.NoSuchFileException: /tmp/elasticsearch-10045853791335045856](https://discuss.elastic.co/t/how-to-resolve-exception-in-thread-main-java-nio-file-nosuchfileexception-tmp-elasticsearch-10045853791335045856/271668)

<div class="topic-metadata">

**Author:** [@hjj3296235](https://discuss.elastic.co/u/hjj3296235)\
**Replies:** 2\
**Last updated:** [May 2, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-resolve-exception-in-thread-main-java-nio-file-nosuchfileexception-tmp-elasticsearch-10045853791335045856/271668 "2021-05-02T14:10:45Z")

</div>

Linux: CentOS\_7 JDK: openJDK\_devel\_8 ES Version: 7.12.0 Log: 4月 28 22:47:46 localhost.localdomain systemd\[1\]: Unit elasticsearch.service entered failed state. 4月 28 22:47:46 localhost.localdomain systemd\[1\]: elastics…

---

## [Random \_id vs custom \_id?](https://discuss.elastic.co/t/random-id-vs-custom-id/271881)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 5\
**Last updated:** [May 2, 2021, 1:23pm UTC](https://discuss.elastic.co/t/random-id-vs-custom-id/271881 "2021-05-02T13:23:43Z")

</div>

Hey there, I saw several topics about this point on the net but I never found exactly if I should prefer random or custom \_id. Is there anyone that can explain it to me? Furthermore, Is there any difference between a cr…

---

## [Is coordinate node useful in a cluster with 9 nodes?](https://discuss.elastic.co/t/is-coordinate-node-useful-in-a-cluster-with-9-nodes/271848)

<div class="topic-metadata">

**Author:** [@Arab.Soheyl](https://discuss.elastic.co/u/Arab.Soheyl)\
**Replies:** 5\
**Last updated:** [May 2, 2021, 6:59am UTC](https://discuss.elastic.co/t/is-coordinate-node-useful-in-a-cluster-with-9-nodes/271848 "2021-05-02T06:59:06Z")

</div>

I have an Elasticsearch cluster as below: 6 data node(hot/warm) 3 data(cold)/master node Does adding 2 coordinate nodes increase performance? or reduce?

---

## [Elasticsearch support plan / contracts](https://discuss.elastic.co/t/elasticsearch-support-plan-contracts/271893)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 1\
**Last updated:** [May 2, 2021, 1:34am UTC](https://discuss.elastic.co/t/elasticsearch-support-plan-contracts/271893 "2021-05-02T01:34:18Z")

</div>

We are looking into getting some sort of support contract to help us manage our On Prem Elasticsearch installation (On Prem). I’ve search the Elasticsearch site, and I’m either missing but I’m not seeing support plans fr…

---

## [Can I just install the latest ES 7.x in my case?](https://discuss.elastic.co/t/can-i-just-install-the-latest-es-7-x-in-my-case/271684)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 9\
**Last updated:** [May 2, 2021, 12:34am UTC](https://discuss.elastic.co/t/can-i-just-install-the-latest-es-7-x-in-my-case/271684 "2021-05-02T00:34:24Z")

</div>

I've asked and talk about this on a few threads, but want to dial this in a bit more... My situation... We currently are running on ES 5.5.1 (Cluster Environment) on Ubuntu 16.04. Recently, we attempted to upgrade the…

---

## [File system backup instead of snapshot](https://discuss.elastic.co/t/file-system-backup-instead-of-snapshot/271882)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 1\
**Last updated:** [May 1, 2021, 6:25pm UTC](https://discuss.elastic.co/t/file-system-backup-instead-of-snapshot/271882 "2021-05-01T18:25:44Z")

</div>

I'm planning to use single node cluster of Elasticsearch. I would like to know if we can take file system level backup if the Elasticsearch is proposing one node one path?

---

## [Correctly set up index analyzer and search analyzer](https://discuss.elastic.co/t/correctly-set-up-index-analyzer-and-search-analyzer/271803)

<div class="topic-metadata">

**Author:** [@Guido\_Cioni](https://discuss.elastic.co/u/Guido_Cioni)\
**Replies:** 2\
**Last updated:** [May 1, 2021, 5:52pm UTC](https://discuss.elastic.co/t/correctly-set-up-index-analyzer-and-search-analyzer/271803 "2021-05-01T17:52:02Z")

</div>

Hi, I'm trying to set up a simple analyzer to search for question/answers into our elastic search cluster. We need to have the option to use english language analyzer (with the default stopwords) together with custom sy…

---

## [Definition of node roles](https://discuss.elastic.co/t/definition-of-node-roles/271859)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 4\
**Last updated:** [May 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/definition-of-node-roles/271859 "2021-05-01T14:33:41Z")

</div>

Hello, What is the meaning this node role? cdfhilmrstw

---

## [Compress Elasticsearch Index after x days](https://discuss.elastic.co/t/compress-elasticsearch-index-after-x-days/269430)

<div class="topic-metadata">

**Author:** [@Harsh\_Sharma](https://discuss.elastic.co/u/Harsh_Sharma)\
**Replies:** 3\
**Last updated:** [April 11, 2021, 12:03pm UTC](https://discuss.elastic.co/t/compress-elasticsearch-index-after-x-days/269430 "2021-04-11T12:03:51Z")

</div>

Hi All, I'm using ELK version 6.5.8. Using curator retention period of ES index are maintaining i.e. 7 days. Here is a requirement where I want to keep 3 days data in index & data more than 3 days should compress & got…

---

## [Elastic Password with Docker and TLS](https://discuss.elastic.co/t/elastic-password-with-docker-and-tls/271812)

<div class="topic-metadata">

**Author:** [@lucasbasquerotto](https://discuss.elastic.co/u/lucasbasquerotto)\
**Replies:** 4\
**Last updated:** [May 1, 2021, 12:35pm UTC](https://discuss.elastic.co/t/elastic-password-with-docker-and-tls/271812 "2021-05-01T12:35:27Z")

</div>

Hi, I'm trying to setup an elasticsearch service running inside a docker container, first in my local machine to make everything work right before I try to deploy remotely. The problem is that I set the ELASTIC\_PASSWORD …

---

## [Error Java heap space](https://discuss.elastic.co/t/error-java-heap-space/271837)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 3\
**Last updated:** [May 1, 2021, 1:02am UTC](https://discuss.elastic.co/t/error-java-heap-space/271837 "2021-05-01T01:02:20Z")

</div>

I created an ElasticSearch server, but today it stopped and in the log it reported that the error was: \[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[main-node\] fatal error in thread \[elasticsearch\[main-node\]\[sea…

---

## [Elastic ILM issue](https://discuss.elastic.co/t/elastic-ilm-issue/269715)

<div class="topic-metadata">

**Author:** [@datama](https://discuss.elastic.co/u/datama)\
**Replies:** 9\
**Last updated:** [April 30, 2021, 6:41pm UTC](https://discuss.elastic.co/t/elastic-ilm-issue/269715 "2021-04-30T18:41:06Z")

</div>

Team, I have setup ILM for hot-warm architecture, getting "action \[indices:admin/aliases\] is unauthorized for API key id of user " error during warm phase. Please advice on how I could resolve, I tried to do a move an…

---

## [Why are Range Queries on Nested Docs Slow?](https://discuss.elastic.co/t/why-are-range-queries-on-nested-docs-slow/271825)

<div class="topic-metadata">

**Author:** [@mserrato](https://discuss.elastic.co/u/mserrato)\
**Replies:** 0\
**Last updated:** [April 30, 2021, 6:43pm UTC](https://discuss.elastic.co/t/why-are-range-queries-on-nested-docs-slow/271825 "2021-04-30T18:43:50Z")

</div>

Hello, I was wondering if I could get some insight and possibly some explanation on some search performance I've noticed when using range queries with nested and non-nested documents. I've been performing some benchmar…

---

## [Matching multiple topics (sets of keywords)](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618)

<div class="topic-metadata">

**Author:** [@aartur](https://discuss.elastic.co/u/aartur)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 4:56pm UTC](https://discuss.elastic.co/t/matching-multiple-topics-sets-of-keywords/271618 "2021-04-30T16:56:30Z")

</div>

Hello, I'm investigating whether ES is able to order documents wrt. a relevance score for two or more keywords sets, assigning a high score only to documents related strongly to all the keyword sets. Lets say I have in…

---

## [Using Group By Keys to apply metric aggregation](https://discuss.elastic.co/t/using-group-by-keys-to-apply-metric-aggregation/271811)

<div class="topic-metadata">

**Author:** [@Craig\_Uss](https://discuss.elastic.co/u/Craig_Uss)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 5:04pm UTC](https://discuss.elastic.co/t/using-group-by-keys-to-apply-metric-aggregation/271811 "2021-04-30T17:04:10Z")

</div>

Is it possible to use an aggregation group\_by attributes in a metric aggregation to determine if the metric should be counted or not? Here is an example: Index of documents: Schema @timestamp - UTC Timestamp c…

---

## [Question about shard balancing](https://discuss.elastic.co/t/question-about-shard-balancing/271796)

<div class="topic-metadata">

**Author:** [@syn](https://discuss.elastic.co/u/syn)\
**Replies:** 1\
**Last updated:** [April 30, 2021, 4:09pm UTC](https://discuss.elastic.co/t/question-about-shard-balancing/271796 "2021-04-30T16:09:51Z")

</div>

hi all, i've a qn.. if node1 has 3 shards. i add node2 and node3 at a later time, will the 3 shards balance out automatically? i.e. 1 shard in each node

---

## [Elasticsearch: On premise restore snapshot from aws s3](https://discuss.elastic.co/t/elasticsearch-on-premise-restore-snapshot-from-aws-s3/271773)

<div class="topic-metadata">

**Author:** [@Mohammad\_Azizieh](https://discuss.elastic.co/u/Mohammad_Azizieh)\
**Replies:** 3\
**Last updated:** [April 30, 2021, 3:20pm UTC](https://discuss.elastic.co/t/elasticsearch-on-premise-restore-snapshot-from-aws-s3/271773 "2021-04-30T15:20:54Z")

</div>

This could sound pretty straightforward. However, I've spent days looking in the web for a method where I can migrate snapshot from aws s3 to on premise elasticsearch cluster. All the docs I've found mentioning how to a…

---

## [Not all the datas are returned](https://discuss.elastic.co/t/not-all-the-datas-are-returned/271766)

<div class="topic-metadata">

**Author:** [@yasvanth](https://discuss.elastic.co/u/yasvanth)\
**Replies:** 4\
**Last updated:** [April 30, 2021, 2:06pm UTC](https://discuss.elastic.co/t/not-all-the-datas-are-returned/271766 "2021-04-30T14:06:54Z")

</div>

Hi Team, I have ELK stack deployed using docker swarm, when I query data I couldn't retrive all the data. I have multi-tenant kibana indices such as Admin-tenant can view all the data and individual-tenant where team/i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=652)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=654)
