# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=772 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 773 --- ## [If there are 2 replicas do they need to be in 2 seperate nodes](https://discuss.elastic.co/t/if-there-are-2-replicas-do-they-need-to-be-in-2-seperate-nodes/254268)
**Author:** [@tkumark](https://discuss.elastic.co/u/tkumark)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 12:41pm UTC](https://discuss.elastic.co/t/if-there-are-2-replicas-do-they-need-to-be-in-2-seperate-nodes/254268 "2020-11-04T12:41:17Z")
The health is yellow. I have a 2 node cluster for Elastic search and the health is in yellow. It looks like there are 10 primary shards and 2 replicas (i.e 2 reaplicas per primary shard so that mean 20 replica shards). I… --- ## [Custom sorting with an Elasticsearch query?](https://discuss.elastic.co/t/custom-sorting-with-an-elasticsearch-query/254229)
**Author:** [@kumar.kapil](https://discuss.elastic.co/u/kumar.kapil)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 11:16am UTC](https://discuss.elastic.co/t/custom-sorting-with-an-elasticsearch-query/254229 "2020-11-04T11:16:20Z")
I have some documents indexed on Elasticsearch, looking like these samples: {'id': 1, 'user\_group\_id': 1, 'is\_popular': false, 'added\_at': '2020-10-05T10:27:59.214Z'} {'id': 2, 'user\_group\_id': 2, 'is\_popular': false, '… --- ## [Replication to DR site, without CCR](https://discuss.elastic.co/t/replication-to-dr-site-without-ccr/253316)
**Author:** [@AndySw](https://discuss.elastic.co/u/AndySw)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 11:07am UTC](https://discuss.elastic.co/t/replication-to-dr-site-without-ccr/253316 "2020-11-04T11:07:10Z")
Hi all. I was trying to find out which options exist if you want to synchronise a primary site with a DR site, both running seperate Elasticsearch clusters. I'm aware of CCR, but it is cost prohibitive. What is the art … --- ## [Find Dates with offset](https://discuss.elastic.co/t/find-dates-with-offset/254244)
**Author:** [@Aquilino\_Viveiros](https://discuss.elastic.co/u/Aquilino_Viveiros)\ **Replies:** 2\ **Last updated:** [November 4, 2020, 10:45am UTC](https://discuss.elastic.co/t/find-dates-with-offset/254244 "2020-11-04T10:45:42Z")
Hello, hopefully someone can help me on this. Consider the following mapping { "dateOfBirth": { "properties": { "value": { "type": "date", "format": "dateOptionalTime" } } } } A… --- ## [How to replace Non-breaking space](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249)
**Author:** [@Chetan\_Ambi](https://discuss.elastic.co/u/Chetan_Ambi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 10:41am UTC](https://discuss.elastic.co/t/how-to-replace-non-breaking-space/254249 "2020-11-04T10:41:22Z")
Could someone please help how to to replace Non-breaking space with regular space. I referred this but its not working. GET /\_analyze { "tokenizer": "keyword", "char\_filter": \[ { "type": "mapping", … --- ## [Pyspark Keeps Enforcing Type Text For Geo-Point, Despite Enforced Mapping](https://discuss.elastic.co/t/pyspark-keeps-enforcing-type-text-for-geo-point-despite-enforced-mapping/254246)
**Author:** [@aneeqyusuf](https://discuss.elastic.co/u/aneeqyusuf)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 10:34am UTC](https://discuss.elastic.co/t/pyspark-keeps-enforcing-type-text-for-geo-point-despite-enforced-mapping/254246 "2020-11-04T10:34:21Z")
Hi guys, I have been trying to index some data, with a geo\_point value into Elasticsearch for a coordinate map visualization on Kibana, using Spark, mainly the es-hadoop connector. Both the connector and ELK versions ar… --- ## ["query\_string" Wildcard search with special characters issue](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068)
**Author:** [@Anas1](https://discuss.elastic.co/u/Anas1)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 10:15am UTC](https://discuss.elastic.co/t/query-string-wildcard-search-with-special-characters-issue/254068 "2020-11-04T10:15:10Z")
When searching using a wildcard words, i have an unexpected behavior. I'm working on ES 5.6.8. To reproduce the issue: (Test with Kibana) - create the index : PUT my-index-00001 { "mappings": { "test": {… --- ## [Kibana sync snapshot with rollover](https://discuss.elastic.co/t/kibana-sync-snapshot-with-rollover/253578)
**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 9:10am UTC](https://discuss.elastic.co/t/kibana-sync-snapshot-with-rollover/253578 "2020-11-04T09:10:02Z")
hello all, i 've asked to archive an index daily , so i have created a ilm to make a rollover every day and after 2 hour delete the index , and also create a snapshot every day at a specific time . was trying to make t… --- ## [Jvm.options missing while installing elasticsearch-oss](https://discuss.elastic.co/t/jvm-options-missing-while-installing-elasticsearch-oss/254158)
**Author:** [@Haptomai](https://discuss.elastic.co/u/Haptomai)\ **Replies:** 7\ **Last updated:** [November 4, 2020, 8:43am UTC](https://discuss.elastic.co/t/jvm-options-missing-while-installing-elasticsearch-oss/254158 "2020-11-04T08:43:55Z")
Hi fellows, No docker version involved here Ubuntu 16.04.7 LTS v7.9.1 OpenJDK 11.0.5 Yesterday I tried to switch from ELK Basic stack to OSS stack in order to use OpenDistro. I removed elasticsearch, kibana and logst… --- ## [Alerting on forecast](https://discuss.elastic.co/t/alerting-on-forecast/254100)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [November 4, 2020, 8:42am UTC](https://discuss.elastic.co/t/alerting-on-forecast/254100 "2020-11-04T08:42:12Z")
Hi, im trying to alert when the forecast prediction value is greater than 95, I need to get the hostname (partition\_value) and the time when the value surpass the treshold of 95, I currently can get the value and the pa… --- ## [Multiple indexes and partial execution](https://discuss.elastic.co/t/multiple-indexes-and-partial-execution/254226)
**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/multiple-indexes-and-partial-execution/254226 "2020-11-04T08:32:29Z")
Hello, We finished a series of tests using rally and got very useful insides. Thank you for the great product guys. We want to run an additional series of tests and I have a couple of questions: We are using \[https://g… --- ## [Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758)
**Author:** [@bob1985](https://discuss.elastic.co/u/bob1985)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 8:32am UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-on-openshift-4-5-3-pods/252758 "2020-11-04T08:32:16Z")
Elasticsearch 7.8.1 on Openshift 4.5 - 3 Pods Hi, Can you please help on below error: "message": "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and \[ \] is empty on this n… --- ## [Performance issues when pushing data using the elastic API](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 7:52am UTC](https://discuss.elastic.co/t/performance-issues-when-pushing-data-using-the-elastic-api/253743 "2020-11-04T07:52:57Z")
Hi, we are using a service on-prem to post data to our elastic cluster in the cloud...hosted by elastic. Not so long ago we had 1 instance running on AWS in frankfurt to which we pushed data. We never experienced timeou… --- ## [Traffic Filters and monitoring clusters](https://discuss.elastic.co/t/traffic-filters-and-monitoring-clusters/253706)
**Author:** [@adrian0](https://discuss.elastic.co/u/adrian0)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 6:42am UTC](https://discuss.elastic.co/t/traffic-filters-and-monitoring-clusters/253706 "2020-11-04T06:42:12Z")
Hi, Regarding Traffic FIlters in ES Cloud, the documentation reads the following: This only applies to external traffic. Internal traffic is managed by Elasticsearch Service. For example, Kibana can connect to Elastic… --- ## [TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large,](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:58am UTC](https://discuss.elastic.co/t/transporterror-transporterror-429-circuit-breaking-exception-parent-data-too-large/254161 "2020-11-04T05:58:53Z")
elasticsearch Version: 7.8.0 Summary: Python client for Elasticsearch TransportError: TransportError(429, 'circuit\_breaking\_exception', '\[parent\] Data too large, data for \[\\] would be \[2128807074/1.9gb\], … --- ## [How to use match\_phrase and fuzzy query at the same time](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 0\ **Last updated:** [November 4, 2020, 5:10am UTC](https://discuss.elastic.co/t/how-to-use-match-phrase-and-fuzzy-query-at-the-same-time/254201 "2020-11-04T05:10:11Z")
I'd like to search documents by phrases and do not need to match all the words included in the phrases, but only some (specified) words / characters. For example, { "match\_phrase": { "target\_field": { "query… --- ## [Same ES cluster for non prod environments (for both dev and qa)](https://discuss.elastic.co/t/same-es-cluster-for-non-prod-environments-for-both-dev-and-qa/253937)
**Author:** [@kcs08](https://discuss.elastic.co/u/kcs08)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 5:33am UTC](https://discuss.elastic.co/t/same-es-cluster-for-non-prod-environments-for-both-dev-and-qa/253937 "2020-11-04T05:33:19Z")
Hello, I have setup Elasticsearch (ES) cluster and using it for dev environment with set of indexes. And wanted to use the same ES cluster for qa environment as well. I mean two different environments with same index na… --- ## [BulkIndexError: ('200 document(s) failed to index.'](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780)
**Author:** [@subham\_p](https://discuss.elastic.co/u/subham_p)\ **Replies:** 3\ **Last updated:** [November 4, 2020, 5:24am UTC](https://discuss.elastic.co/t/bulkindexerror-200-document-s-failed-to-index/253780 "2020-11-04T05:24:32Z")
Hello Team, I am trying to push approx 10000 data by converting the pandas data frame to elk. But it fails to push all, some times it showing following error failed to establish a new connection errno 111 connection r… --- ## [Bulk Request java.lang.InterruptedException concurrency issue](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 4\ **Last updated:** [November 4, 2020, 4:40am UTC](https://discuss.elastic.co/t/bulk-request-java-lang-interruptedexception-concurrency-issue/253850 "2020-11-04T04:40:51Z")
Hello, Context: We have a simple Flink job (v1.11.2 in Scala) from Kafka to ES using the Table api with just 2 joins before writing to ES. It uses the Flink Elasticsearch Connector which under the hood uses the Java ES… --- ## [Timestamp differs by 6 seconds between Kafka record timestamp and the elasticsearch index timestamp](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056)
**Author:** [@Strive](https://discuss.elastic.co/u/Strive)\ **Replies:** 6\ **Last updated:** [November 4, 2020, 4:20am UTC](https://discuss.elastic.co/t/timestamp-differs-by-6-seconds-between-kafka-record-timestamp-and-the-elasticsearch-index-timestamp/254056 "2020-11-04T04:20:46Z")
Hi, There is a ~6 seconds difference in the @timestamp field sent to elasticsearch through Kafka. Here are the details: The JSON object is built in java and is published to Kafka. The Logstash consumes data from Kafk… --- ## [Search query is slow and first query always takes too much time](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652)
**Author:** [@Code\_Wizard](https://discuss.elastic.co/u/Code_Wizard)\ **Replies:** 9\ **Last updated:** [October 30, 2020, 12:31pm UTC](https://discuss.elastic.co/t/search-query-is-slow-and-first-query-always-takes-too-much-time/253652 "2020-10-30T12:31:02Z")
Hi, search queries are slow when i do should match with multiple search terms and also for matching nested documents, basically it is taking 7-10 sec for first query and 5-6 sec later on due to elasticsearch cache, but… --- ## [Elasticsearch - Not able to see the latest logs](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-the-latest-logs/249801)
**Author:** [@chintushah46](https://discuss.elastic.co/u/chintushah46)\ **Replies:** 7\ **Last updated:** [November 3, 2020, 8:40pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-see-the-latest-logs/249801 "2020-11-03T20:40:04Z")
Hi, Looking for the reason of not having updated logs in the log file. I did the following sanity tests too, Checked the owner of the process Have enough resources, like memory as well as disk space Log file is gener… --- ## [Ctx.payload object data disappearing after inclusion of script\_field in watcher api](https://discuss.elastic.co/t/ctx-payload-object-data-disappearing-after-inclusion-of-script-field-in-watcher-api/254185)
**Author:** [@esguy](https://discuss.elastic.co/u/esguy)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 7:53pm UTC](https://discuss.elastic.co/t/ctx-payload-object-data-disappearing-after-inclusion-of-script-field-in-watcher-api/254185 "2020-11-03T19:53:45Z")
Hello, I'm having an issue where the data in my ctx.payload object is disappearing after I include "script\_field" in my watcher. The watcher executes perfectly fine with the desired output when the "script\_field" field … --- ## [Search\_as\_you\_type and highlight](https://discuss.elastic.co/t/search-as-you-type-and-highlight/253010)
**Author:** [@wos](https://discuss.elastic.co/u/wos)\ **Replies:** 2\ **Last updated:** [November 3, 2020, 6:35pm UTC](https://discuss.elastic.co/t/search-as-you-type-and-highlight/253010 "2020-11-03T18:35:48Z")
I am looking for working example of a search\_as\_you\_type and highlight. Could Someone provide me with example? Thanks --- ## [Elastic Cloud Export Control Number (ECCN)](https://discuss.elastic.co/t/elastic-cloud-export-control-number-eccn/254037)
**Author:** [@Masok](https://discuss.elastic.co/u/Masok)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 4:59pm UTC](https://discuss.elastic.co/t/elastic-cloud-export-control-number-eccn/254037 "2020-11-03T16:59:15Z")
Hi We are about to embark on a project which will initially make use of the Elastic Cloud Managed Service. However the compliance department in my organisation require the Export Control Classification Number before the… --- ## [Elasticsearch-setup-password kills elastic process](https://discuss.elastic.co/t/elasticsearch-setup-password-kills-elastic-process/254067)
**Author:** [@martinsz](https://discuss.elastic.co/u/martinsz)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-password-kills-elastic-process/254067 "2020-11-03T16:13:03Z")
Hi, I'm setting up a new cluster with security after successfully fixing it (earlier post https://discuss.elastic.co/t/help-a-non-profit-stir-the-data/251589). The difference is that I've now configured TLS on the HTTP … --- ## [How to limit logging to only 3 months](https://discuss.elastic.co/t/how-to-limit-logging-to-only-3-months/253025)
**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\ **Replies:** 3\ **Last updated:** [November 3, 2020, 4:17pm UTC](https://discuss.elastic.co/t/how-to-limit-logging-to-only-3-months/253025 "2020-11-03T16:17:16Z")
Hi, I am trying to figure out how to limit the number of logs on Elastic/Kibana/Logstash to only hold 3 months worth of data. It is all installed on windows servers. --- ## [Elasticsearch client for Update By Query API](https://discuss.elastic.co/t/elasticsearch-client-for-update-by-query-api/253956)
**Author:** [@bob3](https://discuss.elastic.co/u/bob3)\ **Replies:** 1\ **Last updated:** [November 3, 2020, 4:15pm UTC](https://discuss.elastic.co/t/elasticsearch-client-for-update-by-query-api/253956 "2020-11-03T16:15:35Z")
Hello. I'm trying to use Update By Query API for elasticsearch version 6.3. I can't use Java High Level REST Client because Update By Query API is supported by Java High Level REST Client starting from elasticsearch vers… --- ## [What is the downside of increasing index.mapping.total\_fields.limit dramatically?](https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mapping-total-fields-limit-dramatically/253729)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 5\ **Last updated:** [November 3, 2020, 3:53pm UTC](https://discuss.elastic.co/t/what-is-the-downside-of-increasing-index-mapping-total-fields-limit-dramatically/253729 "2020-11-03T15:53:04Z")
In my use case, I have dynamic fields in my documents which need to be searchable. Each document will only have a couple of these fields (so the total document size will never be massive). I will also only ever be search… --- ## [Is there an elegant way of identifying mapping conflict exceptions programmatically?](https://discuss.elastic.co/t/is-there-an-elegant-way-of-identifying-mapping-conflict-exceptions-programmatically/254171)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 0\ **Last updated:** [November 3, 2020, 3:17pm UTC](https://discuss.elastic.co/t/is-there-an-elegant-way-of-identifying-mapping-conflict-exceptions-programmatically/254171 "2020-11-03T15:17:39Z")
Below are some sample errors that ES returns for mapping conflicts which don't have any info that I can rely on programmatically.. I can't even seem to do regex parsing since different scenarios have different messages. … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=771) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=773)