# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=825

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 826

---

## [Multiple user setup with elasticsearch docker-compose](https://discuss.elastic.co/t/multiple-user-setup-with-elasticsearch-docker-compose/246419)

<div class="topic-metadata">

**Author:** [@gkman](https://discuss.elastic.co/u/gkman)\
**Replies:** 0\
**Last updated:** [August 26, 2020, 9:10am UTC](https://discuss.elastic.co/t/multiple-user-setup-with-elasticsearch-docker-compose/246419 "2020-08-26T09:10:49Z")

</div>

Hi, I am deploying ELK stack using docker compose. I will be using x-pack security features (users + tls) I have found a few examples of how to set a single user in elk (How to set passwords for built-in users with doc…

---

## [Elasticsearch for small datasets?](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139)

<div class="topic-metadata">

**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\
**Replies:** 4\
**Last updated:** [August 26, 2020, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-for-small-datasets/246139 "2020-08-26T08:05:00Z")

</div>

I've just implemented an autocomplete suggestion using Elasticsearch which works like a charm. The index-size is just about 100kb, containing about 500 filter-combinations which clients then use to make further requests…

---

## [Benchmarking ES cluster using rally](https://discuss.elastic.co/t/benchmarking-es-cluster-using-rally/246320)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 2\
**Last updated:** [August 26, 2020, 7:53am UTC](https://discuss.elastic.co/t/benchmarking-es-cluster-using-rally/246320 "2020-08-26T07:53:32Z")

</div>

I am benchmarking ES cluster using esrally. I have created custom tracks using ES queries only search operation not indexing. There is a consistent individual query performance gap(considering 100th percentile service ti…

---

## [Elasticsearch: How to insert geo points into a list coordinate](https://discuss.elastic.co/t/elasticsearch-how-to-insert-geo-points-into-a-list-coordinate/246239)

<div class="topic-metadata">

**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\
**Replies:** 2\
**Last updated:** [August 26, 2020, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-how-to-insert-geo-points-into-a-list-coordinate/246239 "2020-08-26T07:41:31Z")

</div>

Hi I have followed the example in the document to draw a polygon on a map. Here are the setting. PUT /admnycoord { "mappings": { "properties": { "location": { "type": "geo\_shape" } } } } POST /admnycoord/\_do…

---

## [Why "now-60m" is not equal to "now-1h"](https://discuss.elastic.co/t/why-now-60m-is-not-equal-to-now-1h/246400)

<div class="topic-metadata">

**Author:** [@cold](https://discuss.elastic.co/u/cold)\
**Replies:** 0\
**Last updated:** [August 26, 2020, 7:13am UTC](https://discuss.elastic.co/t/why-now-60m-is-not-equal-to-now-1h/246400 "2020-08-26T07:13:54Z")

</div>

elasticsearch version 7.1.1 index mapping is: { "mappings": { "properties": { "@timestamp": { "type": "date" }, "value": { "type": "integer" } } } } index data is: {"index":{"\_index":"t…

---

## [How to get rid of \_type field](https://discuss.elastic.co/t/how-to-get-rid-of-type-field/246230)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 6:55am UTC](https://discuss.elastic.co/t/how-to-get-rid-of-type-field/246230 "2020-08-25T06:55:52Z")

</div>

Hi, I have old indices that still contain the \_type field. I want to get rid of this so that I am prepared for 8.X whenever its coming. How can I remove this field from all my indices? What I tried: Reindex, Did not h…

---

## [Kibana session logout randomly](https://discuss.elastic.co/t/kibana-session-logout-randomly/246388)

<div class="topic-metadata">

**Author:** [@sandikata](https://discuss.elastic.co/u/sandikata)\
**Replies:** 0\
**Last updated:** [August 26, 2020, 5:22am UTC](https://discuss.elastic.co/t/kibana-session-logout-randomly/246388 "2020-08-26T05:22:54Z")

</div>

Hello. I have a working ELK Cluster Stack with SSL security, but it randomly log me out even if i'm working on (not idle). This happens only with elastic user (superuser/admin), with regular user there's no problem. I'…

---

## [Reducing number of shards in 6.5 ES](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709)

<div class="topic-metadata">

**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\
**Replies:** 12\
**Last updated:** [August 26, 2020, 5:17am UTC](https://discuss.elastic.co/t/reducing-number-of-shards-in-6-5-es/245709 "2020-08-26T05:17:13Z")

</div>

I tried to reduce number of shards in ES 6.5 version from default(5) to 1 using 'PUT \_template/temp\_new1 { "index\_patterns" : \["test1-\*"\], "settings" : { "number\_of\_shards" : 1, "number\_of\_replicas" : 1 } }' It …

---

## [Hadoop Training in Hyderabad](https://discuss.elastic.co/t/hadoop-training-in-hyderabad/21732)

<div class="topic-metadata">

**Author:** [@madhu\_k](https://discuss.elastic.co/u/madhu_k)\
**Replies:** 1\
**Last updated:** [December 6, 2016, 9:10am UTC](https://discuss.elastic.co/t/hadoop-training-in-hyderabad/21732 "2016-12-06T09:10:50Z")

</div>

Hadoop Training in Hyderabad, Online Hadoop Training in USA, Online Hadoop Training in UK, Online Hadoop Training in Canada, Online Hadoop Training in Austria, Online Hadoop Training in Singapore,Online Hadoo…

---

## [How to Move existing Index data to warm nodes](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 5\
**Last updated:** [August 26, 2020, 4:56am UTC](https://discuss.elastic.co/t/how-to-move-existing-index-data-to-warm-nodes/246077 "2020-08-26T04:56:41Z")

</div>

Currently I have a 6 node cluster (4 hot nodes and 2 warm nodes). hot nodes contain less disk space and warm nodes are almost free.. The indexes are currently active and data ingestion is going on. below are my doubt: …

---

## [Elasticsearch Query](https://discuss.elastic.co/t/elasticsearch-query/246332)

<div class="topic-metadata">

**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\
**Replies:** 1\
**Last updated:** [August 26, 2020, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-query/246332 "2020-08-26T04:28:33Z")

</div>

Hi All, I have record in Elasticsearch index like below. Can any one pls help me for curl query with following conditions. Conditions: Type must be 'A' user must be 'U1' OR 'U3' date range between '8/22/2020' and '8/…

---

## [Getting mapper\_parsing\_exception while trying to create index in 7.8](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 6\
**Last updated:** [August 25, 2020, 11:22pm UTC](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204 "2020-08-25T23:22:57Z")

</div>

Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/ise?master\_timeout=30s&timeout=30s\], status line \[HTTP/1.1 400 Bad Request\] {"error":{"root\_cause":\[{"type":"mapp…

---

## [How does "Cross-cluster" searching impact \_score?](https://discuss.elastic.co/t/how-does-cross-cluster-searching-impact-score/246358)

<div class="topic-metadata">

**Author:** [@Joshua\_Stromme](https://discuss.elastic.co/u/Joshua_Stromme)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-does-cross-cluster-searching-impact-score/246358 "2020-08-25T21:44:37Z")

</div>

Let's say I've got 5 million resources indexed in two different ways: 5 million on one cluster 2.5 million on one cluster and 2.5 million on another Would a match query yield results in the same order on both setups? …

---

## [User Deleted All Files Inside Node0 Directory](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818)

<div class="topic-metadata">

**Author:** [@ELKNub](https://discuss.elastic.co/u/ELKNub)\
**Replies:** 5\
**Last updated:** [August 25, 2020, 8:45pm UTC](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818 "2020-08-25T20:45:42Z")

</div>

Hey Folks, So one if my users deleted everything inside my directory C:\\ProgramData\\Elastic\\Elasticsearch\\data\\nodes\\0\\indices 'Now I can't start the service "elasticsearch" ' My worry is the configuration is totally …

---

## [Response time much greater than query time in slowlogs - AWS ES](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176)

<div class="topic-metadata">

**Author:** [@jlicheng](https://discuss.elastic.co/u/jlicheng)\
**Replies:** 1\
**Last updated:** [August 25, 2020, 6:51pm UTC](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176 "2020-08-25T18:51:15Z")

</div>

Hi folks, we are using Amazon Elasticsearch and we're seeing a big discrepancy in response time as measured by the code querying Elasticsearch and the slowlogs produced by Elasticsearch. We've turned on "slowlogs" and g…

---

## [Want to modify the Kibana login page Logo](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 6:43pm UTC](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344 "2020-08-25T18:43:59Z")

</div>

I want little modification in Kibana Home page Logo and want to change the name of Kibana in Menu.Is it possible?

---

## [Elasticsearch 7.8.1 not writing to ilm-history-\*](https://discuss.elastic.co/t/elasticsearch-7-8-1-not-writing-to-ilm-history/246311)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-not-writing-to-ilm-history/246311 "2020-08-25T15:15:21Z")

</div>

TL;DR Elasticsearch is not writing to ilm-history-\* in v. 7.8.1, but indices rolling over as expected. Issue I'm using ILM in Elasticsearch 7.8.1. Indices are rolling over, as expected, but Elasticsearch isn't writing t…

---

## [Main ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335)

<div class="topic-metadata">

**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 5:24pm UTC](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335 "2020-08-25T17:24:35Z")

</div>

i use ES 6.5 , on trying to start ES getting following error 2020-08-25 11:58:01,121 main ERROR Null object returned for RollingFile in Appenders. 2020-08-25 11:58:01,122 main ERROR Unable to locate appender "rolling" …

---

## [Too many cached tokens with illegal\_state\_exception error](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250)

<div class="topic-metadata">

**Author:** [@111375](https://discuss.elastic.co/u/111375)\
**Replies:** 2\
**Last updated:** [August 25, 2020, 4:28pm UTC](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250 "2020-08-25T16:28:30Z")

</div>

While doing bulk request to bulk API I got response with errors: Type: (string) (len=23) "illegal\_state\_exception", Reason: (string) (len=30) "Too many cached tokens (\> 100)" I tried to Google this Too many cached toke…

---

## [ELASTICSEARCH - Cumulative\_cardinality without histogram](https://discuss.elastic.co/t/elasticsearch-cumulative-cardinality-without-histogram/246322)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-cumulative-cardinality-without-histogram/246322 "2020-08-25T16:07:41Z")

</div>

With this query I want to make a count of how many unique mobile phone numbers per company. I have this query that returns the following error: {"size": 1, "\_source": "created\_at", "aggs": { "nested": { …

---

## [Is there a bug in elasticsearch 6.5.0 concerning s3 snapshot repositories](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 5\
**Last updated:** [August 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250 "2020-08-25T15:44:37Z")

</div>

Hi All, This is a single node cluster installation running elasticsearch 6.5.0. I noticed that after the set up of the aws access key and secret key in the keystore P.S. I have tested my access key and secret key with…

---

## [ES JVM use ZGC, esrally can't work](https://discuss.elastic.co/t/es-jvm-use-zgc-esrally-cant-work/246253)

<div class="topic-metadata">

**Author:** [@Zhayhp](https://discuss.elastic.co/u/Zhayhp)\
**Replies:** 2\
**Last updated:** [August 25, 2020, 2:09pm UTC](https://discuss.elastic.co/t/es-jvm-use-zgc-esrally-cant-work/246253 "2020-08-25T14:09:38Z")

</div>

There is an error in the rally code (jvm\_stats) when I set the ES Jvm use ZGC. rally.log Traceback (most recent call last): File "/usr/local/python38/lib/python3.8/site-packages/esrally/actor.py", line 85, in guard …

---

## [Pruning Indexes with 0 documents](https://discuss.elastic.co/t/pruning-indexes-with-0-documents/246172)

<div class="topic-metadata">

**Author:** [@akrzos](https://discuss.elastic.co/u/akrzos)\
**Replies:** 4\
**Last updated:** [August 25, 2020, 1:49pm UTC](https://discuss.elastic.co/t/pruning-indexes-with-0-documents/246172 "2020-08-25T13:49:57Z")

</div>

Hello, I am looking for the best method to prune indexes with 0 documents. After we migrated to ILM, we have a few indexes which rollover with 0 documents and this can cause an in-balance across a large cluster where s…

---

## [How can I get the similarity of two single words with ES](https://discuss.elastic.co/t/how-can-i-get-the-similarity-of-two-single-words-with-es/246294)

<div class="topic-metadata">

**Author:** [@Ingo](https://discuss.elastic.co/u/Ingo)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 1:31pm UTC](https://discuss.elastic.co/t/how-can-i-get-the-similarity-of-two-single-words-with-es/246294 "2020-08-25T13:31:01Z")

</div>

I try to get the score of the similarity of two single words but I get always a score of 0 and no hit although the words are very similar. For example, Bundesvermoegensverwaltung and Bundesvermogensverwaltung gives me a…

---

## [Elasticsearch 5.5.1 not able to create repository in GCS](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-able-to-create-repository-in-gcs/246289)

<div class="topic-metadata">

**Author:** [@Vinoth\_Kumarasamy](https://discuss.elastic.co/u/Vinoth_Kumarasamy)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 1:18pm UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-able-to-create-repository-in-gcs/246289 "2020-08-25T13:18:57Z")

</div>

Hi, I am trying to create backup snapshot for my index running in elasticsearch 5.5.1 in GKE. I have followed below steps installed plugin (repository-gcs)and added service-account to keystore. https://www.elastic.co/g…

---

## [ELK cluster architecture](https://discuss.elastic.co/t/elk-cluster-architecture/246036)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [August 25, 2020, 1:07pm UTC](https://discuss.elastic.co/t/elk-cluster-architecture/246036 "2020-08-25T13:07:08Z")

</div>

Is this seems ok architecture? each system has 96gig RAM and 24 core cpus. 3 master node + kibana (kibana is there just incase I need it) 25gig for elasticsearch and 8 gig for kibana 2 co-ordinating node + kibana 25…

---

## [Elasticsearch is still initializing the kibana index... Trying again in 2.5 second](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 5\
**Last updated:** [August 25, 2020, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-is-still-initializing-the-kibana-index-trying-again-in-2-5-second/245701 "2020-08-25T13:03:19Z")

</div>

Hi , I'm getting this error in Kibana Elasticsearch is still initializing the kibana index... Trying again in 2.5 second and the .kibana index is the only index in red mode any suggestions without losing all data ? E…

---

## [Elastic Stack Hardware requirements](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/246286)

<div class="topic-metadata">

**Author:** [@Turotakun98](https://discuss.elastic.co/u/Turotakun98)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 12:59pm UTC](https://discuss.elastic.co/t/elastic-stack-hardware-requirements/246286 "2020-08-25T12:59:04Z")

</div>

Hi, I have to setup the stack on a machine with limited hardware (4GB RAM, Ubuntu 20.04, 80GB SSD). I need to run Elasticsearch, Logstash and Kibana on this machine. I am facing various problem relative to the JVM, in b…

---

## [100 prosent error rate on Rally when using parent-child](https://discuss.elastic.co/t/100-prosent-error-rate-on-rally-when-using-parent-child/246054)

<div class="topic-metadata">

**Author:** [@John\_bermen\_elastic](https://discuss.elastic.co/u/John_bermen_elastic)\
**Replies:** 3\
**Last updated:** [August 25, 2020, 12:41pm UTC](https://discuss.elastic.co/t/100-prosent-error-rate-on-rally-when-using-parent-child/246054 "2020-08-25T12:41:46Z")

</div>

I have an index with an parent child structure. When I try to run a "race" with it in esrally I get 100 percent error rate. As shown bellow: Metric Task Value Unit Cumulative indexing time of primary shards 0 m…

---

## [Delete child documents without parent using Java API](https://discuss.elastic.co/t/delete-child-documents-without-parent-using-java-api/246276)

<div class="topic-metadata">

**Author:** [@makons](https://discuss.elastic.co/u/makons)\
**Replies:** 0\
**Last updated:** [August 25, 2020, 11:59am UTC](https://discuss.elastic.co/t/delete-child-documents-without-parent-using-java-api/246276 "2020-08-25T11:59:24Z")

</div>

As the title says, I'm trying to delete all the parentless child documents using ES Java API. If I got things correctly, I need to use DeleteByQuery, and my proposed solution is this: val allParentlessChildren = QueryBu…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=824)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=826)
