# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=807 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 808 --- ## [Nodes continuously leaving and rejoining the cluster in 7.1 cluster after master switch](https://discuss.elastic.co/t/nodes-continuously-leaving-and-rejoining-the-cluster-in-7-1-cluster-after-master-switch/248771)
**Author:** [@itiyamas](https://discuss.elastic.co/u/itiyamas)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 2:26am UTC](https://discuss.elastic.co/t/nodes-continuously-leaving-and-rejoining-the-cluster-in-7-1-cluster-after-master-switch/248771 "2020-09-17T02:26:20Z")
Hi, I have a 51 node elasticsearch cluster with 48 data nodes and 3 master nodes. ES version is 7.1.1. In one of the cases, I saw that 4 nodes were continuously out of the cluster for a really long time just after maste… --- ## [How to disable http security with xpack enabled](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:47am UTC](https://discuss.elastic.co/t/how-to-disable-http-security-with-xpack-enabled/248872 "2020-09-17T01:47:05Z")
Hi, I am setting up on-premise elastic stack with xpack enabled. As all the infrastructure is with in VPN, I would like to disable http security. But I am not able to use some features of xpack when http security is dis… --- ## [ELK on Cloud vs AWS Elastic search and Logstash](https://discuss.elastic.co/t/elk-on-cloud-vs-aws-elastic-search-and-logstash/248788)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 1:30am UTC](https://discuss.elastic.co/t/elk-on-cloud-vs-aws-elastic-search-and-logstash/248788 "2020-09-17T01:30:07Z")
Hi , Need forum members opinion based on their experience . I looked at two options AWS Elastic search + Logstash ( installed separetly ) ELK licensed installation on cloud Have considered follwing factors List i… --- ## [Curator support for RHEL8](https://discuss.elastic.co/t/curator-support-for-rhel8/248887)
**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:53am UTC](https://discuss.elastic.co/t/curator-support-for-rhel8/248887 "2020-09-17T00:53:53Z")
Hi! I'm using elasticsearch-curator in RHEL8 but it's giving this this error: Traceback (most recent call last): File "/home/buh/.local/lib/python3.6/site-packages/cx\_Freeze/initscripts/\_\_startup\_\_.py", line 14, in … --- ## [Multi\_match most\_fields doesn't divide score by number of clauses](https://discuss.elastic.co/t/multi-match-most-fields-doesnt-divide-score-by-number-of-clauses/248891)
**Author:** [@tochiai](https://discuss.elastic.co/u/tochiai)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 12:08am UTC](https://discuss.elastic.co/t/multi-match-most-fields-doesnt-divide-score-by-number-of-clauses/248891 "2020-09-17T00:08:43Z")
Hi, I was trying to understand scores for the following multi\_match query using explain: true: GET /myindex/\_search { "size": 5, "explain": true, "\_source": false, "query": { "bool": { "minimum\_should… --- ## [Logstash restsart and no error logs](https://discuss.elastic.co/t/logstash-restsart-and-no-error-logs/248853)
**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 11:58pm UTC](https://discuss.elastic.co/t/logstash-restsart-and-no-error-logs/248853 "2020-09-16T23:58:16Z")
I have install the logstash with the rpm package, the version is 6.0, and the vm is 2c 2g, the jdk version is 1.8.0(yum install), when I start the logstash service, it always restart , and no error log in the /var/log/me… --- ## [Send batch file output to Elasticsearch](https://discuss.elastic.co/t/send-batch-file-output-to-elasticsearch/248672)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 5\ **Last updated:** [September 16, 2020, 9:20pm UTC](https://discuss.elastic.co/t/send-batch-file-output-to-elasticsearch/248672 "2020-09-16T21:20:14Z")
Hello Everyone, I am having one batch file, when I run batch file in command prompt it prints some output I want to ingest this output in Elasticsearch instance. kindly provide me help on this case!! --- ## [Unexpected reset of read\_only\_allow\_delete](https://discuss.elastic.co/t/unexpected-reset-of-read-only-allow-delete/248885)
**Author:** [@dwilches](https://discuss.elastic.co/u/dwilches)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 9:17pm UTC](https://discuss.elastic.co/t/unexpected-reset-of-read-only-allow-delete/248885 "2020-09-16T21:17:55Z")
In some of my indices, I'm doing "index.blocks.read\_only\_allow\_delete": true by using the PUT /index/\_settings API call. But after around 10 seconds, the setting disappears and the index is writable again. I'm wondering… --- ## [ES 5.6 "name is already used for a field in other types"](https://discuss.elastic.co/t/es-5-6-name-is-already-used-for-a-field-in-other-types/248884)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 0\ **Last updated:** [September 16, 2020, 9:06pm UTC](https://discuss.elastic.co/t/es-5-6-name-is-already-used-for-a-field-in-other-types/248884 "2020-09-16T21:06:54Z")
Hi, I have one cluster still on 5.6 that has been seeing this error, I would like to resolve it before starting my upgrade to 6 and beyond: \[http\] is defined as an object in mapping \[cloud\_monitor\] but this name is alre… --- ## [Tokenizing a Google Merchant Centre category field](https://discuss.elastic.co/t/tokenizing-a-google-merchant-centre-category-field/248844)
**Author:** [@Ryan\_Davey](https://discuss.elastic.co/u/Ryan_Davey)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 6:39pm UTC](https://discuss.elastic.co/t/tokenizing-a-google-merchant-centre-category-field/248844 "2020-09-16T18:39:24Z")
I'm a new Elastic Search user. I've been presented with a problem where I need to set up a tokenizer for a storefront category property that conforms to google merchant center category text strings For example: Appare… --- ## [How to turn a data node into a dedicated ML node?](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 6:22pm UTC](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340 "2020-09-16T18:22:46Z")
Hi, I've 8 data nodes right now in production. I want to test ML in production, how many dedicated nodes would ML require? Also, I won't be adding any new nodes, so, how can I make the existing data nodes, machine learn… --- ## [Update document with Rest High Level Client](https://discuss.elastic.co/t/update-document-with-rest-high-level-client/248714)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 4:19pm UTC](https://discuss.elastic.co/t/update-document-with-rest-high-level-client/248714 "2020-09-16T16:19:13Z")
Hi, I have to update a document in my Java app, using the Rest High Level Client. I must to override the document, i.e.: I need to replace completely the document with a new version. I am trying this but it only makes … --- ## [Watcher gmail notification in docker-compose](https://discuss.elastic.co/t/watcher-gmail-notification-in-docker-compose/245867)
**Author:** [@vicom\_sistemas](https://discuss.elastic.co/u/vicom_sistemas)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 4:12pm UTC](https://discuss.elastic.co/t/watcher-gmail-notification-in-docker-compose/245867 "2020-09-16T16:12:09Z")
Hi, I´m trying to setup watcher to send emails using gmail. I´m using a docker-compose but every time I add x-pack settings to it, I receive the following error: unknown setting \[xpack.notification.email.account.smtp.a… --- ## [How to get hostname of "Elastic" server / "Cluster" name where the watcher is running?](https://discuss.elastic.co/t/how-to-get-hostname-of-elastic-server-cluster-name-where-the-watcher-is-running/247552)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 3:16pm UTC](https://discuss.elastic.co/t/how-to-get-hostname-of-elastic-server-cluster-name-where-the-watcher-is-running/247552 "2020-09-16T15:16:04Z")
hi we have a clustered environment. Is there a way to get where the "watcher" have run? We have putting a same set of watcher ,but needed to ensure only PROD watchers are alerted. Hence wanted to filter on a specific ke… --- ## [Connect Elastic Search to Tableau - max file descriptors \[4096\] for elasticsearch process is too low, increase to at least \[65535\]](https://discuss.elastic.co/t/connect-elastic-search-to-tableau-max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/248799)
**Author:** [@DG13](https://discuss.elastic.co/u/DG13)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 3:14pm UTC](https://discuss.elastic.co/t/connect-elastic-search-to-tableau-max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65535/248799 "2020-09-16T15:14:36Z")
Hi , I am getting error while running the elastic search after adding below details in elasticsearch.yml to connect elastic search to Tableau http.port: 9200 network.host: \["0.0.0.0", 127.0.0.1", "\[::1\]"\] network.bind… --- ## [Data Correlation in Elasticsearch](https://discuss.elastic.co/t/data-correlation-in-elasticsearch/248833)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/data-correlation-in-elasticsearch/248833 "2020-09-16T13:42:40Z")
Hi All, I just wanted to know whether i can use ELK for my use case, please suggest. WE are using ELK for dashboarding and reporting purpose, for this we are fetching data from multiple datasources like (servicenow, so… --- ## [How to manage shards and indexes on Production cluster?](https://discuss.elastic.co/t/how-to-manage-shards-and-indexes-on-production-cluster/248512)
**Author:** [@Sebastien\_Lelak](https://discuss.elastic.co/u/Sebastien_Lelak)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 1:20pm UTC](https://discuss.elastic.co/t/how-to-manage-shards-and-indexes-on-production-cluster/248512 "2020-09-16T13:20:06Z")
Greetings, We use a 12-node ELK dockerised stack to index our webapps and access logs. We create one index per app per day. webapps logs are stored 90 days, access\_logs shall be available "forever". Currently, we are f… --- ## [About snapshot recovery](https://discuss.elastic.co/t/about-snapshot-recovery/248813)
**Author:** [@zjh](https://discuss.elastic.co/u/zjh)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 1:20pm UTC](https://discuss.elastic.co/t/about-snapshot-recovery/248813 "2020-09-16T13:20:01Z")
Does ES plan to allow changes to the "number of shard" when using snapshot recovery in the future? --- ## [Can't start Elasticsearch with Full disk Space](https://discuss.elastic.co/t/cant-start-elasticsearch-with-full-disk-space/248808)
**Author:** [@Juicy45](https://discuss.elastic.co/u/Juicy45)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 1:01pm UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-with-full-disk-space/248808 "2020-09-16T13:01:28Z")
Hello, I have an elastic on a single server. I know, it's bad but I didn't pay so much attention to the Disk space. The /var filesystem is full at 100%. I want to properly delete the oldest data, if I can with elastic … --- ## [Dynamic score calculation](https://discuss.elastic.co/t/dynamic-score-calculation/248614)
**Author:** [@Ania\_Krawet](https://discuss.elastic.co/u/Ania_Krawet)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 12:32pm UTC](https://discuss.elastic.co/t/dynamic-score-calculation/248614 "2020-09-16T12:32:22Z")
I have documents like this ( simplified case of course): Category: A, Rating: 10 Category: A, Rating: 9 Category: A, Rating: 5 Category: B, Rating: 8 Category: B, Rating: 5 Category: B, Rating: 4 Category: B, Rating: 1… --- ## [Elastic watch condition proble,s](https://discuss.elastic.co/t/elastic-watch-condition-proble-s/245665)
**Author:** [@Fredrik\_Cronholm](https://discuss.elastic.co/u/Fredrik_Cronholm)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 12:34pm UTC](https://discuss.elastic.co/t/elastic-watch-condition-proble-s/245665 "2020-09-16T12:34:41Z")
Hi! I'm trying to figure out a watcher with condition on the amount of hits, but the evaluation always turns out null an watcher execution (with in my mind 3 hits) gives "compare": { "resolved\_values": {… --- ## [Problem Watchers Failed Logins Index out of bounds exception Index 0 out of bounds for length 0](https://discuss.elastic.co/t/problem-watchers-failed-logins-index-out-of-bounds-exception-index-0-out-of-bounds-for-length-0/246694)
**Author:** [@SerSSH](https://discuss.elastic.co/u/SerSSH)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 12:30pm UTC](https://discuss.elastic.co/t/problem-watchers-failed-logins-index-out-of-bounds-exception-index-0-out-of-bounds-for-length-0/246694 "2020-09-16T12:30:26Z")
Hi Experts, Currently I have an error that I have not been able to solve in a watcher, I am making some failed logins, so that when more than 3 attempts are detected per user it is activated and sends a notification by … --- ## [Fine grained access control on specific watchers](https://discuss.elastic.co/t/fine-grained-access-control-on-specific-watchers/247986)
**Author:** [@iorfix](https://discuss.elastic.co/u/iorfix)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 12:06pm UTC](https://discuss.elastic.co/t/fine-grained-access-control-on-specific-watchers/247986 "2020-09-16T12:06:51Z")
Hi, I want different users to create and manage their own watchers. A user could edit / create / delete / ack only the watchers he created. I noted watcher privileges are of type "cluster", so basically each watcher a… --- ## [Elastic to many open files](https://discuss.elastic.co/t/elastic-to-many-open-files/247616)
**Author:** [@akshay\_dindure1994](https://discuss.elastic.co/u/akshay_dindure1994)\ **Replies:** 5\ **Last updated:** [September 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/elastic-to-many-open-files/247616 "2020-09-10T16:27:07Z")
Hello Team I am facing some serious problems in elastic. I am getting below error in elastic logs /opt/SOME\_DIRECTORY\_NAME/elasticsearch/data/nodes/0/indices/7QRpS9mnSwCHPdBwaLUJag/3/translog/translog-53.ckp: Too many … --- ## [Queries on "ip\_range" type (missing documentation)](https://discuss.elastic.co/t/queries-on-ip-range-type-missing-documentation/246445)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 7\ **Last updated:** [September 16, 2020, 10:47am UTC](https://discuss.elastic.co/t/queries-on-ip-range-type-missing-documentation/246445 "2020-09-16T10:47:23Z")
Hi, Unfortunately, I couldn't find any pointers in the documentation. I'd like to have some IP ranges saved and be able to: Perform a query for an IP address. Perform a query for a CIDR range. I got #1 working with q… --- ## [Move warm phase indices to a new warm node](https://discuss.elastic.co/t/move-warm-phase-indices-to-a-new-warm-node/248728)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [September 16, 2020, 10:43am UTC](https://discuss.elastic.co/t/move-warm-phase-indices-to-a-new-warm-node/248728 "2020-09-16T10:43:32Z")
Hello, Is there a way to move indices that have passed the warm phase to a warm node? none was selected in the ILM screen, and currently they are all on the 'hot node" I selected the correct node in the ILM page, but … --- ## [Kubernetes pods are not ready in a Cluster with xpack.security.enabled: true after the pod restart](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/248010)
**Author:** [@ratnakar](https://discuss.elastic.co/u/ratnakar)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 10:38am UTC](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/248010 "2020-09-16T10:38:16Z")
I have created an elasticsearch in Kubernetes using helm charts(helm version 3) by enabling xpack.security. It was working fine and did not find any issues. Today I have deleted those pods and after that Pods are not onl… --- ## [How to fetch only Public or Private IP in ES?](https://discuss.elastic.co/t/how-to-fetch-only-public-or-private-ip-in-es/248717)
**Author:** [@Ramesh\_balasubramani](https://discuss.elastic.co/u/Ramesh_balasubramani)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 9:53am UTC](https://discuss.elastic.co/t/how-to-fetch-only-public-or-private-ip-in-es/248717 "2020-09-16T09:53:15Z")
GET logstash-ramesh-2020.09.16/\_search { "query": { "bool": { "must\_not": \[ { "regexp": { "src\_ip.raw": { "value": "^(?:10|127|172\\\\.(?:1\[6-9\]|2\[0-9\]|3\[… --- ## [ElasticSearch Keyword usage with a prefix search](https://discuss.elastic.co/t/elasticsearch-keyword-usage-with-a-prefix-search/248695)
**Author:** [@Sunilbvr](https://discuss.elastic.co/u/Sunilbvr)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-keyword-usage-with-a-prefix-search/248695 "2020-09-16T10:23:30Z")
I have a requirement to be able to search a sentence as complete or with prefix. The UI library (reactive search) I am using is generating the query in this way: "simple\_query\_string": { "query": "\\"Louis George Mauri… --- ## [Using context in trigger interval](https://discuss.elastic.co/t/using-context-in-trigger-interval/247495)
**Author:** [@Mark\_Veenstra](https://discuss.elastic.co/u/Mark_Veenstra)\ **Replies:** 1\ **Last updated:** [September 16, 2020, 10:07am UTC](https://discuss.elastic.co/t/using-context-in-trigger-interval/247495 "2020-09-16T10:07:20Z")
When I try to do the next: { "trigger": { "schedule": { "interval": "{{ctx.metadata.config.interval}}s" } } "metadata": { "interval": 5 } } It will not work and throws the error: \[parse\_except… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=806) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=808)