# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=787

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 788

---

## [Aggregation 504 bad gateway](https://discuss.elastic.co/t/aggregation-504-bad-gateway/251740)

<div class="topic-metadata">

**Author:** [@Liyes](https://discuss.elastic.co/u/Liyes)\
**Replies:** 5\
**Last updated:** [October 14, 2020, 2:13am UTC](https://discuss.elastic.co/t/aggregation-504-bad-gateway/251740 "2020-10-14T02:13:44Z")

</div>

When I use script to do aggregation and want to find two documents with the same fields in es, 504 bad gateway. Maybe it is caused by too much data. Is there any solution? I used partition. { "size": 0, "aggs": { …

---

## [Get all queries executed on Elastic search](https://discuss.elastic.co/t/get-all-queries-executed-on-elastic-search/251918)

<div class="topic-metadata">

**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\
**Replies:** 1\
**Last updated:** [October 14, 2020, 12:32am UTC](https://discuss.elastic.co/t/get-all-queries-executed-on-elastic-search/251918 "2020-10-14T00:32:38Z")

</div>

Hi, I want to get all queries executed on elastic search. Is there any log file where I can get this information.

---

## [Setting heap size and jvm parameters on elastic docker image](https://discuss.elastic.co/t/setting-heap-size-and-jvm-parameters-on-elastic-docker-image/251953)

<div class="topic-metadata">

**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\
**Replies:** 2\
**Last updated:** [October 13, 2020, 10:20pm UTC](https://discuss.elastic.co/t/setting-heap-size-and-jvm-parameters-on-elastic-docker-image/251953 "2020-10-13T22:20:05Z")

</div>

Hi I am using elasticsearch.k8s.elastic.co/v1 to deploy Elasticsearch defined here When I have deployed to Kubernetes, I notice that the heap size is set to 1GB. I would like to increase it to 4GB. How can I set th…

---

## [Text similarity with Elasticseacrh](https://discuss.elastic.co/t/text-similarity-with-elasticseacrh/251737)

<div class="topic-metadata">

**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\
**Replies:** 4\
**Last updated:** [October 13, 2020, 9:41pm UTC](https://discuss.elastic.co/t/text-similarity-with-elasticseacrh/251737 "2020-10-13T21:41:11Z")

</div>

Hi everyone, Is there a way in Elastic to aggregate the values in a particular field by the similarity between the words? I mean if for example I have a field called "userMailbox", I would like to get groups of mailbox…

---

## [Warm nodes on spinning disks not stable, falling out of cluster during recovery](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078)

<div class="topic-metadata">

**Author:** [@otoce](https://discuss.elastic.co/u/otoce)\
**Replies:** 33\
**Last updated:** [October 13, 2020, 5:26pm UTC](https://discuss.elastic.co/t/warm-nodes-on-spinning-disks-not-stable-falling-out-of-cluster-during-recovery/250078 "2020-10-13T17:26:18Z")

</div>

Hi, our warms nodes are falling out of cluster while in recovery, and then start recovery from zero. Hot nodes are ok. Env: 4 servers, on each (256GB ram, 8 cpu) : 1 hot node, 64GB, ssd, 30 days of data, heavy input f…

---

## [IO / Disc "tear down" for elastic search](https://discuss.elastic.co/t/io-disc-tear-down-for-elastic-search/248013)

<div class="topic-metadata">

**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\
**Replies:** 41\
**Last updated:** [October 13, 2020, 7:08pm UTC](https://discuss.elastic.co/t/io-disc-tear-down-for-elastic-search/248013 "2020-10-13T19:08:49Z")

</div>

Hello, My task is to make an elastic search disk/io "hard life" :-). To not reinventing the wheel - is there a tool for simulation high disk load on elastic? what type of query is the most disk/io intensive? I saw many…

---

## [ReadTimeoutError, maybe related to internal:coordination/fault\_detection/leader\_check?](https://discuss.elastic.co/t/readtimeouterror-maybe-related-to-internal-coordination-fault-detection-leader-check/251940)

<div class="topic-metadata">

**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 4:50pm UTC](https://discuss.elastic.co/t/readtimeouterror-maybe-related-to-internal-coordination-fault-detection-leader-check/251940 "2020-10-13T16:50:11Z")

</div>

When trying to index documents in elastic, the following exception is frequently getting raised: ConnectionTimeout caused by - ReadTimeoutError(HTTPSConnectionPool(host='xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxeaf.us-west-2.aws…

---

## [ElasticSearch 6.5.1 TLS setting](https://discuss.elastic.co/t/elasticsearch-6-5-1-tls-setting/251796)

<div class="topic-metadata">

**Author:** [@varom](https://discuss.elastic.co/u/varom)\
**Replies:** 6\
**Last updated:** [October 13, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-6-5-1-tls-setting/251796 "2020-10-13T19:39:50Z")

</div>

Hi , i am struggling for long time to establish TLS communication between 2 nodes. I followed : https://www.elastic.co/guide/en/elasticsearch/reference/6.5/configuring-tls.html#node-certificates Also check several lin…

---

## [Time stamp is wrong](https://discuss.elastic.co/t/time-stamp-is-wrong/251957)

<div class="topic-metadata">

**Author:** [@victor.vera](https://discuss.elastic.co/u/victor.vera)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251957 "2020-10-13T19:17:51Z")

</div>

I have a problem with the time stamp I get the date right, but the time is wrong I get like 5 hours in advance, the date is right but I do not know why I get another time of execution, set the time zone in kibana, but I …

---

## [Is there an event handler for Retries within the NEST client?](https://discuss.elastic.co/t/is-there-an-event-handler-for-retries-within-the-nest-client/251951)

<div class="topic-metadata">

**Author:** [@astanton1978](https://discuss.elastic.co/u/astanton1978)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 6:50pm UTC](https://discuss.elastic.co/t/is-there-an-event-handler-for-retries-within-the-nest-client/251951 "2020-10-13T18:50:26Z")

</div>

We are getting frequent request timeouts and have specified... throw exceptions disable direct streaming a 2 minute request timeout up to 5 retries a max retry timeout of 10 minutes ... on the client and are executing…

---

## [Elasticsearch 7.2 set up cluster ERROR: \[2\] bootstrap checks failed in docker](https://discuss.elastic.co/t/elasticsearch-7-2-set-up-cluster-error-2-bootstrap-checks-failed-in-docker/251946)

<div class="topic-metadata">

**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\
**Replies:** 3\
**Last updated:** [October 13, 2020, 6:21pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-set-up-cluster-error-2-bootstrap-checks-failed-in-docker/251946 "2020-10-13T18:21:08Z")

</div>

Hello! I have tried convert Elasticsearch 7.2 standalone node to cluster in docker. Error: elasticsearch\_1 | {"type": "server", "timestamp": "2020-10-13T15:36:39,791+0000", "level": "INFO", "component": "o.e.b.Bo…

---

## [Index Lifecycle Policy not working properly](https://discuss.elastic.co/t/index-lifecycle-policy-not-working-properly/251905)

<div class="topic-metadata">

**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 1:23pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-working-properly/251905 "2020-10-13T13:23:48Z")

</div>

(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged)

---

## [Starting with ELK](https://discuss.elastic.co/t/starting-with-elk/251885)

<div class="topic-metadata">

**Author:** [@riosdfr](https://discuss.elastic.co/u/riosdfr)\
**Replies:** 4\
**Last updated:** [October 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/starting-with-elk/251885 "2020-10-13T14:31:31Z")

</div>

Dear All, I am completely new to ELK and following some help I created a docker-compose.yml file in order to run it under Docker. Inside this file I configured a elasticsearch service and kibana, but accessing kibana is…

---

## [Configure ingest manager in elasticseach 7.9](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 6\
**Last updated:** [October 13, 2020, 2:27pm UTC](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114 "2020-10-13T14:27:52Z")

</div>

I have configured ELK on a single VM ( Centos 7 / 10Gig / 4 CPU) along with filebeat and auditbeat as POC and encountered the below error while trying to use the ingest manager. I followed the security setup as sugges…

---

## [The node does not automatically return to the Elasticsearch cluster](https://discuss.elastic.co/t/the-node-does-not-automatically-return-to-the-elasticsearch-cluster/251848)

<div class="topic-metadata">

**Author:** [@djuwa4](https://discuss.elastic.co/u/djuwa4)\
**Replies:** 18\
**Last updated:** [October 13, 2020, 1:41pm UTC](https://discuss.elastic.co/t/the-node-does-not-automatically-return-to-the-elasticsearch-cluster/251848 "2020-10-13T13:41:14Z")

</div>

Good afternoon! I have a cluster of five nodes: three node.master and all five node.data. There is a problem when testing it. If you turn off one node and turn it on again, its elasticsearch instance does not see the clu…

---

## [Send email whenever error occurs in the logs](https://discuss.elastic.co/t/send-email-whenever-error-occurs-in-the-logs/251888)

<div class="topic-metadata">

**Author:** [@Vatsal\_Agarwal](https://discuss.elastic.co/u/Vatsal_Agarwal)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 10:26am UTC](https://discuss.elastic.co/t/send-email-whenever-error-occurs-in-the-logs/251888 "2020-10-13T10:26:48Z")

</div>

Hi I need to send email automatically whenever any error comes in my Elastic search. Is there anyway to do it. I dont want to use Elastic Cloud for it. I can use Watcher in Kibana, but my question is whether the "Wat…

---

## [Attributes for template of system indices](https://discuss.elastic.co/t/attributes-for-template-of-system-indices/251893)

<div class="topic-metadata">

**Author:** [@v.n](https://discuss.elastic.co/u/v.n)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 11:05am UTC](https://discuss.elastic.co/t/attributes-for-template-of-system-indices/251893 "2020-10-13T11:05:34Z")

</div>

We have hot data nodes and warm/cold. But shards of system indices always partly store on warm data nodes. Of cource I can add an attribute pointing where to store this index but I prefer to save this info in template. …

---

## [Is a value stored twice when using a tolowercase normalizer on keywords?](https://discuss.elastic.co/t/is-a-value-stored-twice-when-using-a-tolowercase-normalizer-on-keywords/251884)

<div class="topic-metadata">

**Author:** [@DanglingNode](https://discuss.elastic.co/u/DanglingNode)\
**Replies:** 1\
**Last updated:** [October 13, 2020, 10:43am UTC](https://discuss.elastic.co/t/is-a-value-stored-twice-when-using-a-tolowercase-normalizer-on-keywords/251884 "2020-10-13T10:43:15Z")

</div>

Hi all, I'm using a 'tolowercase' normalizer upon index (mapping) time to be able to find documents with value 'John Doe' when searching for 'john doe'. Upon index creation: client.Indices.Create( …

---

## [Snapshot expiration date with S3 bucket](https://discuss.elastic.co/t/snapshot-expiration-date-with-s3-bucket/251887)

<div class="topic-metadata">

**Author:** [@sahitkumarreddy](https://discuss.elastic.co/u/sahitkumarreddy)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 10:23am UTC](https://discuss.elastic.co/t/snapshot-expiration-date-with-s3-bucket/251887 "2020-10-13T10:23:57Z")

</div>

We have a policy for creating snapshots to aws S3 bucket. In retention, we have to set expire\_after( delete after) 'y days'. Suppose if set expiration to 1 day, will it delete the snapshot just from elastic search or wi…

---

## [How to optimise heap usage on elasticsearch nodes?](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627)

<div class="topic-metadata">

**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\
**Replies:** 8\
**Last updated:** [October 13, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627 "2020-10-13T10:20:53Z")

</div>

We use elasticsearch for analytics and ingest around 3 billions events a day. For this, we create daily indices and each index has a ttl of 30 days. We flush out older indices through a cron job Cluster Size : 200 nodes …

---

## [Can I use elasticsearch 7 with Kibana 6](https://discuss.elastic.co/t/can-i-use-elasticsearch-7-with-kibana-6/251867)

<div class="topic-metadata">

**Author:** [@111320](https://discuss.elastic.co/u/111320)\
**Replies:** 2\
**Last updated:** [October 13, 2020, 10:02am UTC](https://discuss.elastic.co/t/can-i-use-elasticsearch-7-with-kibana-6/251867 "2020-10-13T10:02:49Z")

</div>

I have a server with RHEL 6. I saw in the Support Matrix that Kibana 7 is not supported in RHEL 6. Can I use Elasticsearch 7 with Kibana 6?

---

## [Script\_score query: fvh highlighter doesn't work](https://discuss.elastic.co/t/script-score-query-fvh-highlighter-doesnt-work/248926)

<div class="topic-metadata">

**Author:** [@grob](https://discuss.elastic.co/u/grob)\
**Replies:** 2\
**Last updated:** [October 13, 2020, 8:50am UTC](https://discuss.elastic.co/t/script-score-query-fvh-highlighter-doesnt-work/248926 "2020-10-13T08:50:03Z")

</div>

Hi, (ElasticSearch 7.8.0) it looks like script\_score queries in conjunction with fvh highligher and matched\_fields doesn't work. I don't know if i'm missing something, but i couldn't find any do's/don'ts in the documen…

---

## [Unable to start Elasticsearch](https://discuss.elastic.co/t/unable-to-start-elasticsearch/251816)

<div class="topic-metadata">

**Author:** [@prabhukiran](https://discuss.elastic.co/u/prabhukiran)\
**Replies:** 2\
**Last updated:** [October 13, 2020, 8:18am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch/251816 "2020-10-13T08:18:01Z")

</div>

I've installed Elasticsearch on a clean, new, updated build of CentOS (7.7.1908). This installation is in support of a Wazuh installation using instructions found here: https://documentation.wazuh.com/3.10/installation-…

---

## [Query with two date range filters 8x slower than an equivalent query with one?](https://discuss.elastic.co/t/query-with-two-date-range-filters-8x-slower-than-an-equivalent-query-with-one/251804)

<div class="topic-metadata">

**Author:** [@adamleonard](https://discuss.elastic.co/u/adamleonard)\
**Replies:** 1\
**Last updated:** [October 13, 2020, 8:06am UTC](https://discuss.elastic.co/t/query-with-two-date-range-filters-8x-slower-than-an-equivalent-query-with-one/251804 "2020-10-13T08:06:36Z")

</div>

We recently added a query that had two date range filters applied for the same field, in short, if dates X, Y, and Z are sorted chronologically, the query was: "Date between X and Y" "Date before Z" This query is of c…

---

## [Failed to parse field \[coordinates\] of type \[geo\_shape\]](https://discuss.elastic.co/t/failed-to-parse-field-coordinates-of-type-geo-shape/251305)

<div class="topic-metadata">

**Author:** [@davidb1](https://discuss.elastic.co/u/davidb1)\
**Replies:** 6\
**Last updated:** [October 13, 2020, 7:36am UTC](https://discuss.elastic.co/t/failed-to-parse-field-coordinates-of-type-geo-shape/251305 "2020-10-13T07:36:02Z")

</div>

I'm using Kibana to upload a geojson to Elasticsearch. It loads and shows up without problems but when I try to index it I get: { "success": true, "failures": \[ { "item": 0, "reason": "failed to pars…

---

## [Index.lifecycle.rollover\_alias does not point to index](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609)

<div class="topic-metadata">

**Author:** [@Zoltan\_Kovacs](https://discuss.elastic.co/u/Zoltan_Kovacs)\
**Replies:** 6\
**Last updated:** [October 13, 2020, 7:51am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-does-not-point-to-index/250609 "2020-10-13T07:51:00Z")

</div>

Hello @warkolm ! I run to this error today. I use NLog to write to ES. I would like to use rollover for not blow up my monthly index more than 50GB. Error: \[2020-10-01T07:54:17,209\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner…

---

## [Context Suggester Input Generation: How to optimize \_analyze call over large no. of documents](https://discuss.elastic.co/t/context-suggester-input-generation-how-to-optimize-analyze-call-over-large-no-of-documents/251853)

<div class="topic-metadata">

**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 7:02am UTC](https://discuss.elastic.co/t/context-suggester-input-generation-how-to-optimize-analyze-call-over-large-no-of-documents/251853 "2020-10-13T07:02:18Z")

</div>

We are using Context suggester on our documents to support autocompletion. However, since Context suggester does not support shingle analyzer out of the box, we're trying to generate shingles ourselves. Our custom analy…

---

## [ElasticSearch 7.7.1 Connection issues with Windows Server 2019 vs Windows Server 2012 R2](https://discuss.elastic.co/t/elasticsearch-7-7-1-connection-issues-with-windows-server-2019-vs-windows-server-2012-r2/251818)

<div class="topic-metadata">

**Author:** [@aurelio.rama](https://discuss.elastic.co/u/aurelio.rama)\
**Replies:** 7\
**Last updated:** [October 13, 2020, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-connection-issues-with-windows-server-2019-vs-windows-server-2012-r2/251818 "2020-10-13T06:39:52Z")

</div>

I am running the ElasticSearch service fine on Windows 2012 R2 and when performing netstat I see :\\Windows\\system32\>netstat -ano | find ":9200" TCP 0.0.0.0:9200 0.0.0.0:0 LISTENING 2276 …

---

## [Setting \[index.lifecycle.rollover\_alias\] for index \[ilm-history\] is empty or not defined](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-ilm-history-is-empty-or-not-defined/251842)

<div class="topic-metadata">

**Author:** [@tonyfwk](https://discuss.elastic.co/u/tonyfwk)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 5:21am UTC](https://discuss.elastic.co/t/setting-index-lifecycle-rollover-alias-for-index-ilm-history-is-empty-or-not-defined/251842 "2020-10-13T05:21:58Z")

</div>

Hi, I get the \[ilm-history\] error. However, I believe both the "index.lifecycle.rollover\_alias" and index "ilm-history" were setup by default when I enabled the "setup\_ilm\_enable: true", along with setup.ilm.rollover\_al…

---

## [What value to be used for max\_num\_segments for Es 7.9 when we do force merge? is it a permanent change or the segment no will go increasing once we start writing to the index again?](https://discuss.elastic.co/t/what-value-to-be-used-for-max-num-segments-for-es-7-9-when-we-do-force-merge-is-it-a-permanent-change-or-the-segment-no-will-go-increasing-once-we-start-writing-to-the-index-again/251839)

<div class="topic-metadata">

**Author:** [@GauriA](https://discuss.elastic.co/u/GauriA)\
**Replies:** 0\
**Last updated:** [October 13, 2020, 4:25am UTC](https://discuss.elastic.co/t/what-value-to-be-used-for-max-num-segments-for-es-7-9-when-we-do-force-merge-is-it-a-permanent-change-or-the-segment-no-will-go-increasing-once-we-start-writing-to-the-index-again/251839 "2020-10-13T04:25:21Z")

</div>

I am upgrading ES 1.4.2 to ES 7.9. For that I had to do remote indexing by re-indexing API to get all the data from old cluster to new cluster. But after re-indexning the search query performance of ES 7.9 got decreased …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=786)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=788)
