# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=686

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 687

---

## [How to limit the Relate search terms suggestion](https://discuss.elastic.co/t/how-to-limit-the-relate-search-terms-suggestion/266752)

<div class="topic-metadata">

**Author:** [@RKSKirpalani](https://discuss.elastic.co/u/RKSKirpalani)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 8:14pm UTC](https://discuss.elastic.co/t/how-to-limit-the-relate-search-terms-suggestion/266752 "2021-03-09T20:14:11Z")

</div>

I use ES 6.5 in my Magento 2.3 website, when i search anything on my website, The search terms are appearing many line that full my mobile view website. how i can limit this to 2 suggestion. with regards, R.Sahu

---

## [Reindex w/field collapsing](https://discuss.elastic.co/t/reindex-w-field-collapsing/266725)

<div class="topic-metadata">

**Author:** [@F\_Doe\_FW](https://discuss.elastic.co/u/F_Doe_FW)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 4:51pm UTC](https://discuss.elastic.co/t/reindex-w-field-collapsing/266725 "2021-03-09T16:51:58Z")

</div>

Is there any way to collapse results with ReIndexing? I have a source index and want to get the most used pieces out, and only return their 'natural' key into a new index. I can't figure out how to stuff the collapse l…

---

## [Aggregation query returning single word results](https://discuss.elastic.co/t/aggregation-query-returning-single-word-results/266718)

<div class="topic-metadata">

**Author:** [@aanders50](https://discuss.elastic.co/u/aanders50)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 4:06pm UTC](https://discuss.elastic.co/t/aggregation-query-returning-single-word-results/266718 "2021-03-09T16:06:54Z")

</div>

Hello! Just wanted to preface that I am new to ElasticSearch so I apologize if I am missing any basic concepts. I have an issue and I saw some other similar articles, but they were from quite awhile back and wanted to v…

---

## [Sending data from mongodb to Elasticsearch](https://discuss.elastic.co/t/sending-data-from-mongodb-to-elasticsearch/266706)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 2\
**Last updated:** [March 9, 2021, 3:42pm UTC](https://discuss.elastic.co/t/sending-data-from-mongodb-to-elasticsearch/266706 "2021-03-09T15:42:47Z")

</div>

Hello, I would like to send data from mongodb in Elasticsearch, I saw a lot of different plugins like monstache, mongo-connector, but I'd like to have your recommendations for indexing this data, knowing that I will hav…

---

## [No document in index, but index stats reports numerous docs](https://discuss.elastic.co/t/no-document-in-index-but-index-stats-reports-numerous-docs/266708)

<div class="topic-metadata">

**Author:** [@zarak](https://discuss.elastic.co/u/zarak)\
**Replies:** 4\
**Last updated:** [March 9, 2021, 3:13pm UTC](https://discuss.elastic.co/t/no-document-in-index-but-index-stats-reports-numerous-docs/266708 "2021-03-09T15:13:52Z")

</div>

Hi ! I have an index that reports me some documents in Kibana in Index management, as well as in its stats: GET /v2-logs-000003/\_stats { "\_shards" : { "total" : 6, "successful" : 6, "f…

---

## [Get only one level of documents when using path-hierarchy tokenizer](https://discuss.elastic.co/t/get-only-one-level-of-documents-when-using-path-hierarchy-tokenizer/266704)

<div class="topic-metadata">

**Author:** [@avhvr](https://discuss.elastic.co/u/avhvr)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 1:53pm UTC](https://discuss.elastic.co/t/get-only-one-level-of-documents-when-using-path-hierarchy-tokenizer/266704 "2021-03-09T13:53:01Z")

</div>

Hi, I need to search documents (employee details) that are present in a tree structure. The number of levels in the hierarchy could be any. . Using path-hierarchy tokenizer and this post, I was able to index them and…

---

## [HPA for clients in helm chart](https://discuss.elastic.co/t/hpa-for-clients-in-helm-chart/266694)

<div class="topic-metadata">

**Author:** [@adrobisch](https://discuss.elastic.co/u/adrobisch)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 12:27pm UTC](https://discuss.elastic.co/t/hpa-for-clients-in-helm-chart/266694 "2021-03-09T12:27:30Z")

</div>

Hi, we are running the official k8s helm chart are wondering why there is no HPA support for the client node group? We are aware that it would not be a good idea on the data / master nodes and that the clients also mai…

---

## [Problem with email\_from\_field use in elastalert](https://discuss.elastic.co/t/problem-with-email-from-field-use-in-elastalert/266688)

<div class="topic-metadata">

**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 11:54am UTC](https://discuss.elastic.co/t/problem-with-email-from-field-use-in-elastalert/266688 "2021-03-09T11:54:15Z")

</div>

Hello, I have an issue using the email\_from\_field ... field. I created a basic alert, which is triggered (i tested without email\_from\_field and with the "email" filled). But i never received any mail on the mail transm…

---

## [Increase in CPU usage when deleting snapshots](https://discuss.elastic.co/t/increase-in-cpu-usage-when-deleting-snapshots/266682)

<div class="topic-metadata">

**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 11:29am UTC](https://discuss.elastic.co/t/increase-in-cpu-usage-when-deleting-snapshots/266682 "2021-03-09T11:29:46Z")

</div>

Hello, I have a process which deletes outdated ES snapshots which are saved on AWS S3. Currently there are 326 snapshots which are scheduled for deletion. From the docs, https://www.elastic.co/guide/en/elasticsearch/re…

---

## [Index store size increased by 4X on new index created using slipt api](https://discuss.elastic.co/t/index-store-size-increased-by-4x-on-new-index-created-using-slipt-api/266633)

<div class="topic-metadata">

**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\
**Replies:** 3\
**Last updated:** [March 9, 2021, 10:33am UTC](https://discuss.elastic.co/t/index-store-size-increased-by-4x-on-new-index-created-using-slipt-api/266633 "2021-03-09T10:33:47Z")

</div>

We had one index with 1 shard/1 replica config. As per /\_cat/indices, it shows docs.count =133213 docs.deleted=2430 store.size=819.1gb pri.store.size=409.5gb now we used split api to create new index with 40 shards. …

---

## [Schema design and query - aggregation within nested document](https://discuss.elastic.co/t/schema-design-and-query-aggregation-within-nested-document/266629)

<div class="topic-metadata">

**Author:** [@cuongthamhl](https://discuss.elastic.co/u/cuongthamhl)\
**Replies:** 1\
**Last updated:** [March 9, 2021, 8:14am UTC](https://discuss.elastic.co/t/schema-design-and-query-aggregation-within-nested-document/266629 "2021-03-09T08:14:32Z")

</div>

I have a simple schema with a nested field. A sample product document look like this: { "name": "product name", "events": \[ { "startDate": "2021-01-01 00:00:00", "endDate": "2021-01-01 00:00:00", …

---

## [Date timezone issue](https://discuss.elastic.co/t/date-timezone-issue/266644)

<div class="topic-metadata">

**Author:** [@Priyank07](https://discuss.elastic.co/u/Priyank07)\
**Replies:** 3\
**Last updated:** [March 9, 2021, 8:04am UTC](https://discuss.elastic.co/t/date-timezone-issue/266644 "2021-03-09T08:04:39Z")

</div>

Hi, I am pushing some documents to elastic and passing time as local time. So my question is.. Will that time converts to utc or it will be in local only.

---

## [How can I split string in Elasticsearch](https://discuss.elastic.co/t/how-can-i-split-string-in-elasticsearch/266576)

<div class="topic-metadata">

**Author:** [@pakwai122](https://discuss.elastic.co/u/pakwai122)\
**Replies:** 5\
**Last updated:** [March 9, 2021, 7:57am UTC](https://discuss.elastic.co/t/how-can-i-split-string-in-elasticsearch/266576 "2021-03-09T07:57:04Z")

</div>

I'm using nodejs as the client-side for Elasticsearch and got the following settings for the query. I want to split the text while users input text like "aa123 bb234" into "aa123 bb" "234". Only split the pattern like "b…

---

## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/266528)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 5\
**Last updated:** [March 9, 2021, 6:43am UTC](https://discuss.elastic.co/t/elasticsearch/266528 "2021-03-09T06:43:13Z")

</div>

what files are pulled from the target server to elastic and where are they stored? how long is the file stored? How do I set the file I want to drag to elastic?

---

## [Getting log":{"message":"Exception during establishing a SSL connection: HttpRequestOnTransportException\[This is not an HTTP port\]"}}](https://discuss.elastic.co/t/getting-log-message-exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266627)

<div class="topic-metadata">

**Author:** [@Mayank\_Srivastava](https://discuss.elastic.co/u/Mayank_Srivastava)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 3:56am UTC](https://discuss.elastic.co/t/getting-log-message-exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266627 "2021-03-09T03:56:01Z")

</div>

Hi , we are getting this ERROR flooding logs in elasticsearch ,Can you please help us on this why its coming. ''' {"type":"log","host":"btel-belk-elasticsearch-master-0","level":"ERROR","systemid":"2106a117733f42d69728…

---

## [Cannot seem to get ingest pipelines to work, please help!](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 11\
**Last updated:** [March 9, 2021, 3:16am UTC](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259 "2021-03-09T03:16:25Z")

</div>

I am trying to understand ES ingest pipelines and Filebeat. I am using version 7.11 ES and K and FB in docker containers. If I do not add the pipeline, I get the log lines in ES/K from FB, but they are not formatted …

---

## [Elasticsearch SSL/TLS PKI realm setup](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790)

<div class="topic-metadata">

**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\
**Replies:** 13\
**Last updated:** [March 9, 2021, 1:18am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790 "2021-03-09T01:18:45Z")

</div>

Hello, I am trying to setup PKI realm on my onpremise ELK stack on a k8s cluster and I am using helm as the package manager Elasticsearch version: 7.11.1 I have created an organization signed server certificate, using…

---

## [Exclude and include not working on script\_score](https://discuss.elastic.co/t/exclude-and-include-not-working-on-script-score/266498)

<div class="topic-metadata">

**Author:** [@Min-Young](https://discuss.elastic.co/u/Min-Young)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 2:12am UTC](https://discuss.elastic.co/t/exclude-and-include-not-working-on-script-score/266498 "2021-03-08T02:12:05Z")

</div>

Hi guys, if query is something like that... { "size": 30, "\_source": { "includes": "source\_sentence", "excludes": \["source\_embedding", "target\_embedding"\] }, "query": { "script\_score": { "quer…

---

## [Error in getting all the snapshots under a repository](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034)

<div class="topic-metadata">

**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034 "2021-03-08T20:41:02Z")

</div>

Hi, I have registered a repository named repo123 to use one of my AWS buckets for storing snapshots. When I run GET \_snapshot/repo123 it returns the output as expected, containing repo name - {"repo123":{"type":"s3"…

---

## [How to write a script in Ingest Pipeline to detect the null values and pushed to separate index on failure (unformattedindex)](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517)

<div class="topic-metadata">

**Author:** [@sravankayitha](https://discuss.elastic.co/u/sravankayitha)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:09pm UTC](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517 "2021-03-08T20:09:40Z")

</div>

How to detect the null values in Ingest Pipeline and Index it. Actual index name: myindex Unformatted index name: unformattedindex i have tried the below Script Processor to detect the null values to Actual index(inde…

---

## [Logstash Metricbeat monitoring - empty instance kibana display](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599)

<div class="topic-metadata">

**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599 "2021-03-08T19:47:32Z")

</div>

I am having problems monitoring Logstash instances with Metricbeat, to be more precise the problem is with Kibana instance Node tab. Metricbeat service is running with logstash-xpack.yml properly configured, I can curl l…

---

## [Uptime monitor status](https://discuss.elastic.co/t/uptime-monitor-status/266585)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 7:35pm UTC](https://discuss.elastic.co/t/uptime-monitor-status/266585 "2021-03-08T19:35:25Z")

</div>

Hi - we have hearbeat installed/configured in our environment. When we check on the uptime status, I do see the historic count of the services that were down listed in the dashboard but nothing shows up in the "Monitor s…

---

## [Deletion of indices action not enforced](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 7:32pm UTC](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561 "2021-03-08T19:32:23Z")

</div>

Hi Team, I deployed EFK stack in my cluster with default settings except storage size and secrets settings. Everything is working so far. Now, I wanted to configure elasticsearch curator for managing indices in elasti…

---

## [Kibana Queries - depends on the order of the fields?](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538)

<div class="topic-metadata">

**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538 "2021-03-08T10:41:37Z")

</div>

Hi, I did not find answer on the Internet:( I would like to know - from cluster utilization perspective - if depends on order of fields in query. Specifically, lets say I have index and data below: "\_index": "firewall" …

---

## [Query get error when using serial\_diff with bucket\_selector](https://discuss.elastic.co/t/query-get-error-when-using-serial-diff-with-bucket-selector/263716)

<div class="topic-metadata">

**Author:** [@pablocp](https://discuss.elastic.co/u/pablocp)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 4:47pm UTC](https://discuss.elastic.co/t/query-get-error-when-using-serial-diff-with-bucket-selector/263716 "2021-03-08T16:47:35Z")

</div>

I have a set of products, and each product has a price that varies in time. I want to find those products that comparing to week -1 have decreased its average value a %. I thought it would be fine to make a query and to …

---

## [Java heap space issues](https://discuss.elastic.co/t/java-heap-space-issues/266407)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 3:36pm UTC](https://discuss.elastic.co/t/java-heap-space-issues/266407 "2021-03-08T15:36:57Z")

</div>

Hi - we have seen a couple of times since yesterday where some of the elastic nodes are crashing due to java.lang.Exception: java.lang.OutOfMemoryError: Java heap space error. This happened on the client node, ingest no…

---

## [Any efficient way to perform shards reduction of the original index? Need to do shards rebalancing after shards reduction?](https://discuss.elastic.co/t/any-efficient-way-to-perform-shards-reduction-of-the-original-index-need-to-do-shards-rebalancing-after-shards-reduction/266574)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 3:08pm UTC](https://discuss.elastic.co/t/any-efficient-way-to-perform-shards-reduction-of-the-original-index-need-to-do-shards-rebalancing-after-shards-reduction/266574 "2021-03-08T15:08:33Z")

</div>

Hi, we are trying to reduce number of primary shards, from 5 shards and one replica shard of each primary, to 2 primary shards and one replica of each primary shard. The process we are going to do as follow. Wondering i…

---

## [org.elasticsearch.common.breaker.CircuitBreakingException](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception/266559)

<div class="topic-metadata">

**Author:** [@mandeep](https://discuss.elastic.co/u/mandeep)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 1:09pm UTC](https://discuss.elastic.co/t/org-elasticsearch-common-breaker-circuitbreakingexception/266559 "2021-03-08T13:09:25Z")

</div>

Hi while indexing document in the ES7.x we are getting this error. Any suggestions :pray:: logs: org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\<transport\_request\>\] would …

---

## [Elasticsearch Ingest node restart with "java.lang.OutOfMemoryError: Java heap space"](https://discuss.elastic.co/t/elasticsearch-ingest-node-restart-with-java-lang-outofmemoryerror-java-heap-space/266085)

<div class="topic-metadata">

**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\
**Replies:** 5\
**Last updated:** [March 8, 2021, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-node-restart-with-java-lang-outofmemoryerror-java-heap-space/266085 "2021-03-08T12:57:46Z")

</div>

Elastic Version: 6.5.4 ES cluster has 16 ingest nodes with -Xms8g -Xmx8g. We have around 120 fluentd pushing the data to ES cluster. The ingest nodes are getting restarted with java.lang.OutOfMemoryError: Java heap sp…

---

## [Get notified when some documents appeared in a saved search](https://discuss.elastic.co/t/get-notified-when-some-documents-appeared-in-a-saved-search/266546)

<div class="topic-metadata">

**Author:** [@arcturuscom](https://discuss.elastic.co/u/arcturuscom)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 12:53pm UTC](https://discuss.elastic.co/t/get-notified-when-some-documents-appeared-in-a-saved-search/266546 "2021-03-08T12:53:31Z")

</div>

Hello, i'm asking if it's possible to save a search made by an end users & get notified when there's some new documents appeared related to that search and placed on the Top 10. real use case : In the most Rental Houses…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=685)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=687)
