# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=851

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 852

---

## [Identification of development mode vs production mode in Elasticsearch](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 7:38am UTC](https://discuss.elastic.co/t/identification-of-development-mode-vs-production-mode-in-elasticsearch/242701 "2020-07-27T07:38:31Z")

</div>

Currently, we are using below mention values in network.host param in elasticsearch.yml. network.host: \["localhost", "::1", "10.0.x.xx"\] Here we have used both localhost and non-localhost address. Which mode is this co…

---

## [Delete old indeces data](https://discuss.elastic.co/t/delete-old-indeces-data/242651)

<div class="topic-metadata">

**Author:** [@Yaniv\_Israel](https://discuss.elastic.co/u/Yaniv_Israel)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 7:35am UTC](https://discuss.elastic.co/t/delete-old-indeces-data/242651 "2020-07-27T07:35:25Z")

</div>

Hi, I'm trying to make some drill down to our system ELK before upgrading. We are running ElasticSearch with 1.7 (old, I know). I've found that on ES data directory, we have some indices that not exists by ES (not sho…

---

## [Failed to execute bulk item (update) BulkShardRequest](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687)

<div class="topic-metadata">

**Author:** [@devinderpal](https://discuss.elastic.co/u/devinderpal)\
**Replies:** 3\
**Last updated:** [July 27, 2020, 7:20am UTC](https://discuss.elastic.co/t/failed-to-execute-bulk-item-update-bulkshardrequest/242687 "2020-07-27T07:20:04Z")

</div>

I am facing Live server problem on elastisearch. My RAM is 32 GB and Heap Memory is 8GB. But still i am facing the problem in elastisearch. Bellow are the logs // Error Log \[2020-07-26T20:15:05,456\]\[DEBUG\]\[o.e.a.b.Tra…

---

## [How to set the order of aggregations](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025)

<div class="topic-metadata">

**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 7:00am UTC](https://discuss.elastic.co/t/how-to-set-the-order-of-aggregations/242025 "2020-07-27T07:00:54Z")

</div>

is it possible to set the order of aggregations in the response to be the same as they are added in the request?

---

## [Indexing single document](https://discuss.elastic.co/t/indexing-single-document/240636)

<div class="topic-metadata">

**Author:** [@amit.surana](https://discuss.elastic.co/u/amit.surana)\
**Replies:** 3\
**Last updated:** [July 27, 2020, 6:08am UTC](https://discuss.elastic.co/t/indexing-single-document/240636 "2020-07-27T06:08:33Z")

</div>

Hi Team, We are planning to use ElasticSearch and to test our expected load we want to run some load test. I was looking at custom track options and see that bulk operation is used for indexing documents. However, we wo…

---

## ["org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed - ES 7.6](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555)

<div class="topic-metadata">

**Author:** [@srikhark](https://discuss.elastic.co/u/srikhark)\
**Replies:** 3\
**Last updated:** [July 27, 2020, 5:07am UTC](https://discuss.elastic.co/t/org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-es-7-6/242555 "2020-07-27T05:07:32Z")

</div>

I got below error on ES 7.6 and queries were taking time to execute. Can any one help on this. ? I have deployed our cluster on docker {"log":"\[2020-07-24T12:35:34,270\]\[WARN \]\[r.suppressed \] \[cindex\_name…

---

## [RAM and Data size](https://discuss.elastic.co/t/ram-and-data-size/239904)

<div class="topic-metadata">

**Author:** [@jigsm\_shah](https://discuss.elastic.co/u/jigsm_shah)\
**Replies:** 5\
**Last updated:** [July 26, 2020, 11:59pm UTC](https://discuss.elastic.co/t/ram-and-data-size/239904 "2020-07-26T23:59:25Z")

</div>

Hello, I am a newbie exploring Elastic Search and having hard time understanding how does Elastic Search handle data which is larger than the RAM size. I am going through the documentations and it says to allocate 50% …

---

## [Is it effective to divide data into multiple indexes instead of multiple shards/nodes?](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 2\
**Last updated:** [July 26, 2020, 11:07pm UTC](https://discuss.elastic.co/t/is-it-effective-to-divide-data-into-multiple-indexes-instead-of-multiple-shards-nodes/242324 "2020-07-26T23:07:48Z")

</div>

I have ~100GB data and would like to build a search application with the data. The each document has a field like category id, besides ordinal text fields. Users usually filter the documents specifying the category ids…

---

## [Elastic search as a service](https://discuss.elastic.co/t/elastic-search-as-a-service/242384)

<div class="topic-metadata">

**Author:** [@deyujjal70](https://discuss.elastic.co/u/deyujjal70)\
**Replies:** 1\
**Last updated:** [July 26, 2020, 11:02pm UTC](https://discuss.elastic.co/t/elastic-search-as-a-service/242384 "2020-07-26T23:02:41Z")

</div>

Hello All ,I am new to elastic search .I have recenly built 4 node elastic search .1 master node,2 master+data and 1 Dedicated data node.We have installed ES using the tar file on redhat 7. We are not using Root access.…

---

## [About Authenticates to Hadoop](https://discuss.elastic.co/t/about-authenticates-to-hadoop/242447)

<div class="topic-metadata">

**Author:** [@loopong](https://discuss.elastic.co/u/loopong)\
**Replies:** 0\
**Last updated:** [July 24, 2020, 5:01am UTC](https://discuss.elastic.co/t/about-authenticates-to-hadoop/242447 "2020-07-24T05:01:24Z")

</div>

I‘m using the repository-hdfs plugin to back up our indices. I know that we can use the keytab file in ES\_HOME/config/repository-hdfs/krb5.keytab to get Authenticates to Hadoop, but is there any other ways? For example, …

---

## [Get a count of values from the most recent document](https://discuss.elastic.co/t/get-a-count-of-values-from-the-most-recent-document/242474)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 0\
**Last updated:** [July 24, 2020, 7:49am UTC](https://discuss.elastic.co/t/get-a-count-of-values-from-the-most-recent-document/242474 "2020-07-24T07:49:10Z")

</div>

I can't get a count of fields with a filtered document value. I have this json { "took" : 6, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hi…

---

## [Bootstrap method initialization exception - Elasticsearch 7.8.0](https://discuss.elastic.co/t/bootstrap-method-initialization-exception-elasticsearch-7-8-0/242588)

<div class="topic-metadata">

**Author:** [@dpadasala93](https://discuss.elastic.co/u/dpadasala93)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 5:04am UTC](https://discuss.elastic.co/t/bootstrap-method-initialization-exception-elasticsearch-7-8-0/242588 "2020-07-25T05:04:29Z")

</div>

Hi Team, Using java-high-level-rest client when we call getMapping for index or create index functions below errors get generated every time. almost for all the index related calls are generating this exception. bootst…

---

## [Create index pattern with python](https://discuss.elastic.co/t/create-index-pattern-with-python/242633)

<div class="topic-metadata">

**Author:** [@momora9809](https://discuss.elastic.co/u/momora9809)\
**Replies:** 0\
**Last updated:** [July 26, 2020, 7:22am UTC](https://discuss.elastic.co/t/create-index-pattern-with-python/242633 "2020-07-26T07:22:14Z")

</div>

Hi, How can I set index pattern with python, before putting any docs? I came up with this, am I on the right tracks? query = "settings": { "number\_of\_shards": 2, "number\_of\_replicas": 1, "mapp…

---

## [Bulk API item error types](https://discuss.elastic.co/t/bulk-api-item-error-types/242639)

<div class="topic-metadata">

**Author:** [@Munawwar1](https://discuss.elastic.co/u/Munawwar1)\
**Replies:** 1\
**Last updated:** [July 26, 2020, 12:11pm UTC](https://discuss.elastic.co/t/bulk-api-item-error-types/242639 "2020-07-26T12:11:02Z")

</div>

Hi. I am trying to differentiate validation errors from intermittent errors from bulk index API. So let's say I tried to index 3 documents, and one failed.. I want to retry the indexing only if it was an intermittent er…

---

## [Get all the Records from the Scroll not working](https://discuss.elastic.co/t/get-all-the-records-from-the-scroll-not-working/242650)

<div class="topic-metadata">

**Author:** [@Asad\_Iftikhar94](https://discuss.elastic.co/u/Asad_Iftikhar94)\
**Replies:** 0\
**Last updated:** [July 26, 2020, 11:50am UTC](https://discuss.elastic.co/t/get-all-the-records-from-the-scroll-not-working/242650 "2020-07-26T11:50:25Z")

</div>

I am trying to get all the records from the index the issue i am having is that i cannot get all the reocrds using Scroll filters.Add(new TermsQuery { Field = new Field("MERCHANTN…

---

## [Function\_score is so slow . how can i slove it?](https://discuss.elastic.co/t/function-score-is-so-slow-how-can-i-slove-it/242636)

<div class="topic-metadata">

**Author:** [@liutao053877](https://discuss.elastic.co/u/liutao053877)\
**Replies:** 6\
**Last updated:** [July 26, 2020, 11:03am UTC](https://discuss.elastic.co/t/function-score-is-so-slow-how-can-i-slove-it/242636 "2020-07-26T11:03:09Z")

</div>

just like this . : https://discuss.elastic.co/t/simple-function-score-query-shows-very-poor-performance/274 I use the version es 6.8. I write a rescore plugin in java and the speed is so slow . I rescore need to fetc…

---

## [Elasticsearch Client for high performance](https://discuss.elastic.co/t/elasticsearch-client-for-high-performance/242642)

<div class="topic-metadata">

**Author:** [@bastimm](https://discuss.elastic.co/u/bastimm)\
**Replies:** 1\
**Last updated:** [July 26, 2020, 10:05am UTC](https://discuss.elastic.co/t/elasticsearch-client-for-high-performance/242642 "2020-07-26T10:05:36Z")

</div>

Hello, everyone, some years ago I wrote a search server for several webshops. Currently the search is based on Elasticsearch-5 and PHP and an Elasticsearch server. Now I want to create this search completely new. The g…

---

## [Is ID query faster than terms?](https://discuss.elastic.co/t/is-id-query-faster-than-terms/242623)

<div class="topic-metadata">

**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\
**Replies:** 1\
**Last updated:** [July 26, 2020, 4:53am UTC](https://discuss.elastic.co/t/is-id-query-faster-than-terms/242623 "2020-07-26T04:53:51Z")

</div>

So I am trying to save comment objects to ES, should I just use comment\_id as the native \_id field? Later if I am to retrieve 500 comments, will query by ids { "query": { "ids" : { "values" : \[id1, id2, ...\] } } …

---

## [Is there a way to update by Aggregation results](https://discuss.elastic.co/t/is-there-a-way-to-update-by-aggregation-results/242617)

<div class="topic-metadata">

**Author:** [@WoH](https://discuss.elastic.co/u/WoH)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 8:13pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-by-aggregation-results/242617 "2020-07-25T20:13:04Z")

</div>

I'm looking to update a large amount of documents. I am able to update individual documents if I use the following script where MD51 and MD52 are the actual values that I enter. { "script": { "source"…

---

## [Filter for Multivalues field not working](https://discuss.elastic.co/t/filter-for-multivalues-field-not-working/242611)

<div class="topic-metadata">

**Author:** [@Karthi96](https://discuss.elastic.co/u/Karthi96)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 5:42pm UTC](https://discuss.elastic.co/t/filter-for-multivalues-field-not-working/242611 "2020-07-25T17:42:03Z")

</div>

Hi All, I'm trying to filter a multivalued field from ES but unfortunately, it's not working. GET/\_search{ "query": { "bool": { "must": { "multi\_match": { "fields": \[ "title^3"…

---

## [Create repository throws error on creation](https://discuss.elastic.co/t/create-repository-throws-error-on-creation/242593)

<div class="topic-metadata">

**Author:** [@Tudor\_Frincu](https://discuss.elastic.co/u/Tudor_Frincu)\
**Replies:** 1\
**Last updated:** [July 25, 2020, 9:27am UTC](https://discuss.elastic.co/t/create-repository-throws-error-on-creation/242593 "2020-07-25T09:27:51Z")

</div>

I am trying to take a snapshot for a elasticsearch cluster.The design is the following. There are 3 VMs that run 1 master, 1 data and 1 client node each in Docker containers. Each VM has a volume attached for storing. So…

---

## [Delete\_by\_query optimization](https://discuss.elastic.co/t/delete-by-query-optimization/242590)

<div class="topic-metadata">

**Author:** [@ness1602](https://discuss.elastic.co/u/ness1602)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 5:55am UTC](https://discuss.elastic.co/t/delete-by-query-optimization/242590 "2020-07-25T05:55:23Z")

</div>

Hi i have a question, how to optimize delete\_by\_query when deleting from multiple indices? Let's say i have 100 indices, can we somehow set delete\_by\_query one by one index , or limit number of simultaneous deletes? Or c…

---

## [How to script a multi-match](https://discuss.elastic.co/t/how-to-script-a-multi-match/242589)

<div class="topic-metadata">

**Author:** [@Wurzelsepp](https://discuss.elastic.co/u/Wurzelsepp)\
**Replies:** 0\
**Last updated:** [July 25, 2020, 5:18am UTC](https://discuss.elastic.co/t/how-to-script-a-multi-match/242589 "2020-07-25T05:18:29Z")

</div>

Hi, I am trying to understand how a multi-match score could be scripted. Consider a list of publications, with sample data items like { "title": "Sounds of Silence", "author": \[ { "first": "Paul", "last"\_ "Simon" }, { …

---

## [Delete indices older than 30 days using Kibana Index Lifecycle policies](https://discuss.elastic.co/t/delete-indices-older-than-30-days-using-kibana-index-lifecycle-policies/242350)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 6\
**Last updated:** [July 24, 2020, 7:44pm UTC](https://discuss.elastic.co/t/delete-indices-older-than-30-days-using-kibana-index-lifecycle-policies/242350 "2020-07-24T19:44:34Z")

</div>

Hello. I am new to ELK. I have managed to install and setup ELK 7.6.2 stack on RHEL 7 servers. Now as part of house keeping I need to remove/ delete indices older than 30 days to maintain certain level of available dis…

---

## [Performance Benefits to using Stored Scripts?](https://discuss.elastic.co/t/performance-benefits-to-using-stored-scripts/242556)

<div class="topic-metadata">

**Author:** [@micah.williamson](https://discuss.elastic.co/u/micah.williamson)\
**Replies:** 1\
**Last updated:** [July 24, 2020, 7:29pm UTC](https://discuss.elastic.co/t/performance-benefits-to-using-stored-scripts/242556 "2020-07-24T19:29:40Z")

</div>

I haven't seen anything in the documentation that would suggest using stored scripts are better for performance, but intuitively I'd think running a stored script many times would perform better than running an inline sc…

---

## [Which synonym match led to the retrieved result document?](https://discuss.elastic.co/t/which-synonym-match-led-to-the-retrieved-result-document/242557)

<div class="topic-metadata">

**Author:** [@lancy](https://discuss.elastic.co/u/lancy)\
**Replies:** 0\
**Last updated:** [July 24, 2020, 6:20pm UTC](https://discuss.elastic.co/t/which-synonym-match-led-to-the-retrieved-result-document/242557 "2020-07-24T18:20:48Z")

</div>

When we query an index configured with query-time expansion format synonyms (e.g.: specimen, sample, exemplar) is it possible to determine which particular synonym or synonym set led to a document being retrieved as a re…

---

## [Filebeat doc has both message and error.message fields](https://discuss.elastic.co/t/filebeat-doc-has-both-message-and-error-message-fields/242528)

<div class="topic-metadata">

**Author:** [@srpine](https://discuss.elastic.co/u/srpine)\
**Replies:** 0\
**Last updated:** [July 24, 2020, 3:06pm UTC](https://discuss.elastic.co/t/filebeat-doc-has-both-message-and-error-message-fields/242528 "2020-07-24T15:06:37Z")

</div>

I installed filebeat on several of my elastic cluster nodes and I am seeing docs from the (node)\_server.json that have both a message field and an error.message field complaining about Provided Grok expressions do not ma…

---

## [Elasticsearch throwing number of documents in the index cannot exceed 2147483519](https://discuss.elastic.co/t/elasticsearch-throwing-number-of-documents-in-the-index-cannot-exceed-2147483519/242512)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 2\
**Last updated:** [July 24, 2020, 2:17pm UTC](https://discuss.elastic.co/t/elasticsearch-throwing-number-of-documents-in-the-index-cannot-exceed-2147483519/242512 "2020-07-24T14:17:27Z")

</div>

HI Team, I'm using monthly index to store all my data in elasticsearch. i have enabled DLQ to capture the unformatted log information and in that im getting capture below error. elasticsearch ±Could not index event t…

---

## [Unable to login to Kibana by using LDAP user who is having a superuser role](https://discuss.elastic.co/t/unable-to-login-to-kibana-by-using-ldap-user-who-is-having-a-superuser-role/242218)

<div class="topic-metadata">

**Author:** [@elkusergrr](https://discuss.elastic.co/u/elkusergrr)\
**Replies:** 7\
**Last updated:** [July 24, 2020, 1:36pm UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana-by-using-ldap-user-who-is-having-a-superuser-role/242218 "2020-07-24T13:36:24Z")

</div>

Hi, I am unable to login to Kibana by using an LDAP user who is having a superuser role. Getting below the exception. {"statusCode":401,"error":"Unauthorized","message":"\[security\_exception\] unable to authenticate user…

---

## [Esrally error - Could not initialize internal actor system](https://discuss.elastic.co/t/esrally-error-could-not-initialize-internal-actor-system/240993)

<div class="topic-metadata">

**Author:** [@pro.shivansh](https://discuss.elastic.co/u/pro.shivansh)\
**Replies:** 3\
**Last updated:** [July 24, 2020, 1:35pm UTC](https://discuss.elastic.co/t/esrally-error-could-not-initialize-internal-actor-system/240993 "2020-07-24T13:35:58Z")

</div>

Hello everyone, I was running a benchmark-only for a cluster and ran into an error as described below. I would really appreciate it if someone can help me figure out why is this error occurring and a possible resolution. …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=850)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=852)
