# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=924

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 925

---

## [ElasticSearch - DockerSwarm : Unable to discover nodes in cluster](https://discuss.elastic.co/t/elasticsearch-dockerswarm-unable-to-discover-nodes-in-cluster/232330)

<div class="topic-metadata">

**Author:** [@elk5](https://discuss.elastic.co/u/elk5)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 11:01pm UTC](https://discuss.elastic.co/t/elasticsearch-dockerswarm-unable-to-discover-nodes-in-cluster/232330 "2020-05-12T23:01:51Z")

</div>

Hi, I am trying to configure elasticsearch and kibana on 3-node docker swarm. Here is the compose yaml file being used: ========== version: '3.3' services: elastic01: image: docker.elastic.co/elasticsearch/elastics…

---

## [Unable to run set-up password after enabling x-pack security on a cluster](https://discuss.elastic.co/t/unable-to-run-set-up-password-after-enabling-x-pack-security-on-a-cluster/231317)

<div class="topic-metadata">

**Author:** [@TheNmaptomyHeartBeat](https://discuss.elastic.co/u/TheNmaptomyHeartBeat)\
**Replies:** 6\
**Last updated:** [May 12, 2020, 10:25pm UTC](https://discuss.elastic.co/t/unable-to-run-set-up-password-after-enabling-x-pack-security-on-a-cluster/231317 "2020-05-12T22:25:24Z")

</div>

Hello I am using Elasticsearch version 7.6.2. on Ubuntu 18.04. I set up an Elasticsearch cluster with 3 nodes and it works perfectly. When I went back to set up secuirty on the cluster. I started by setting the follow…

---

## [S3 and Frozen indices](https://discuss.elastic.co/t/s3-and-frozen-indices/232323)

<div class="topic-metadata">

**Author:** [@contregm](https://discuss.elastic.co/u/contregm)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 10:23pm UTC](https://discuss.elastic.co/t/s3-and-frozen-indices/232323 "2020-05-12T22:23:31Z")

</div>

I have not been able to find any documentation but is S3 supported as a target for anything other then snapshots one Elastic or ECE? Specifically can you place frozen indices on S3 storage?

---

## [Can I intentionally fail or throw exception in a painless script for update API?](https://discuss.elastic.co/t/can-i-intentionally-fail-or-throw-exception-in-a-painless-script-for-update-api/232327)

<div class="topic-metadata">

**Author:** [@duopan](https://discuss.elastic.co/u/duopan)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 9:13pm UTC](https://discuss.elastic.co/t/can-i-intentionally-fail-or-throw-exception-in-a-painless-script-for-update-api/232327 "2020-05-12T21:13:53Z")

</div>

Hello experts, I would like to throw exception or return error based on application logic in a painless script during update, since update API cannot have any return. But I couldn't find related info on the website yet.…

---

## [Boost documents on array intersection](https://discuss.elastic.co/t/boost-documents-on-array-intersection/232326)

<div class="topic-metadata">

**Author:** [@Charles\_Lariviere](https://discuss.elastic.co/u/Charles_Lariviere)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 9:09pm UTC](https://discuss.elastic.co/t/boost-documents-on-array-intersection/232326 "2020-05-12T21:09:49Z")

</div>

Hi, I would like to boost documents based on the number of items matched between a search array and a document's tags array. Given these documents: { 'id': "1", 'popularity': 5 'tags': \[ "badge", …

---

## [Phrase Suggestor in two fields](https://discuss.elastic.co/t/phrase-suggestor-in-two-fields/232325)

<div class="topic-metadata">

**Author:** [@jeanpjm](https://discuss.elastic.co/u/jeanpjm)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 8:59pm UTC](https://discuss.elastic.co/t/phrase-suggestor-in-two-fields/232325 "2020-05-12T20:59:09Z")

</div>

does anyone know how to put the Phrase Suggestor query from elasticsearch to search in two fields at the same time? I created the filter in the two fields (description and title) in my mapping of my index, but I was onl…

---

## [\_forcemerge not doing anything](https://discuss.elastic.co/t/forcemerge-not-doing-anything/232310)

<div class="topic-metadata">

**Author:** [@wrossmann](https://discuss.elastic.co/u/wrossmann)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 8:25pm UTC](https://discuss.elastic.co/t/forcemerge-not-doing-anything/232310 "2020-05-12T20:25:44Z")

</div>

I recently had a process go a bit nuts and add a lot of junk documents to some of my indices. It's not the first time that this has happened, and I have a cleanup script that runs /\_delete\_by\_query and then \_forcemerge?o…

---

## [Scroll analysis at node stats level](https://discuss.elastic.co/t/scroll-analysis-at-node-stats-level/232127)

<div class="topic-metadata">

**Author:** [@solenom85](https://discuss.elastic.co/u/solenom85)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 7:39pm UTC](https://discuss.elastic.co/t/scroll-analysis-at-node-stats-level/232127 "2020-05-12T19:39:17Z")

</div>

Hi: I was querying the nodes API in an ES cluster and saw the following output related to scroll contexts. "scroll\_total": 1546241427, "scroll\_time": "103866.7d", "scroll\_time\_in\_millis": 8974085281558, "scroll\_curr…

---

## [All Primary Nodes Maxed out CPU](https://discuss.elastic.co/t/all-primary-nodes-maxed-out-cpu/232066)

<div class="topic-metadata">

**Author:** [@Erik\_Miller](https://discuss.elastic.co/u/Erik_Miller)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 1:19pm UTC](https://discuss.elastic.co/t/all-primary-nodes-maxed-out-cpu/232066 "2020-05-12T13:19:17Z")

</div>

Hi All, I'm running ES version 2.4 and am having the majority of the nodes become maxed out on cpu for 15-30 minutes but eventually come back down to normal usage ~50% load. When this occurs the entire cluster becomes e…

---

## [Performance issues like a single-node](https://discuss.elastic.co/t/performance-issues-like-a-single-node/232291)

<div class="topic-metadata">

**Author:** [@flaco0](https://discuss.elastic.co/u/flaco0)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 6:10pm UTC](https://discuss.elastic.co/t/performance-issues-like-a-single-node/232291 "2020-05-12T18:10:46Z")

</div>

Hi, guys; I have a problem with performance of my sigle-node elasticconfiguration. I have version 6.3.0, with docker When I have the service more than a month up, I have performance problems. I need restart service…

---

## [Using wildcard in the prefix not working](https://discuss.elastic.co/t/using-wildcard-in-the-prefix-not-working/232279)

<div class="topic-metadata">

**Author:** [@Sivaranjani](https://discuss.elastic.co/u/Sivaranjani)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 5:14pm UTC](https://discuss.elastic.co/t/using-wildcard-in-the-prefix-not-working/232279 "2020-05-12T17:14:18Z")

</div>

Below is the query string we are trying to use. But It's not working correctly, ((\*meat\*) AND (\*garlics\*)) -\> it's not returning garlic in the data. when i remove \* before the word garlics, it's showing.

---

## [Load file from AWS S3 Bucket to ElasticSearch](https://discuss.elastic.co/t/load-file-from-aws-s3-bucket-to-elasticsearch/232268)

<div class="topic-metadata">

**Author:** [@Shahid\_Rehman](https://discuss.elastic.co/u/Shahid_Rehman)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 4:12pm UTC](https://discuss.elastic.co/t/load-file-from-aws-s3-bucket-to-elasticsearch/232268 "2020-05-12T16:12:40Z")

</div>

I am new to Elasticsearch and i want load file from S3 to create index in elasticsearch. In spark we used to write something like below spark.read("s3 bucket path") Need you help in loading file to ES using Kibana Dev…

---

## [About setting of heap size in elastic search](https://discuss.elastic.co/t/about-setting-of-heap-size-in-elastic-search/232194)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 4:09pm UTC](https://discuss.elastic.co/t/about-setting-of-heap-size-in-elastic-search/232194 "2020-05-12T16:09:10Z")

</div>

As per the document https://www.elastic.co/guide/en/elasticsearch/reference/current/heap-size.html#heap-size , It is recommended to set Xmx and Xms for heap size to not more than 50% of available memory. But if we have s…

---

## [Unable to start Elasticsearch 7.6.2 due to java.lang.NoSuchFieldError: LUCENE\_6\_0\_0](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2-due-to-java-lang-nosuchfielderror-lucene-6-0-0/232006)

<div class="topic-metadata">

**Author:** [@markt277](https://discuss.elastic.co/u/markt277)\
**Replies:** 10\
**Last updated:** [May 12, 2020, 4:03pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-6-2-due-to-java-lang-nosuchfielderror-lucene-6-0-0/232006 "2020-05-12T16:03:49Z")

</div>

Hi there I'm upgrading Elasticsearch, Kibana and Filebeat to their respective latest versions, starting with Elasticsearch. I took a backup of all the indices before starting. This is a single node in a dev environment.…

---

## [Mapping parser exception for geopoint index in Amazon ES 7.4](https://discuss.elastic.co/t/mapping-parser-exception-for-geopoint-index-in-amazon-es-7-4/232241)

<div class="topic-metadata">

**Author:** [@jonrau1](https://discuss.elastic.co/u/jonrau1)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 3:56pm UTC](https://discuss.elastic.co/t/mapping-parser-exception-for-geopoint-index-in-amazon-es-7-4/232241 "2020-05-12T15:56:22Z")

</div>

I am attempting to load up Amazon Elasticsearch Service (version 7.4) with Kinesis Data Firehose. Right before I turned on the hose (no pun intended) I put an index defining the JSON object I would be sending in, to incl…

---

## [Elastic search fail to start](https://discuss.elastic.co/t/elastic-search-fail-to-start/232258)

<div class="topic-metadata">

**Author:** [@jignesh](https://discuss.elastic.co/u/jignesh)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 3:48pm UTC](https://discuss.elastic.co/t/elastic-search-fail-to-start/232258 "2020-05-12T15:48:39Z")

</div>

Hi there, I have install ES on AWS Linux box via yum and checked the JAVA\_HOME is present and pointing to right directory, still ES fail to start. Here is config file: ################################ # Elasticsearch…

---

## [Simple syntax diagram of Query DSL?](https://discuss.elastic.co/t/simple-syntax-diagram-of-query-dsl/232257)

<div class="topic-metadata">

**Author:** [@Max\_Rahder](https://discuss.elastic.co/u/Max_Rahder)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 3:27pm UTC](https://discuss.elastic.co/t/simple-syntax-diagram-of-query-dsl/232257 "2020-05-12T15:27:48Z")

</div>

Hi! I'm a complete noob. Is there a nice simple syntax diagram (i.e., BNF or a diagram thereof), of which clauses go with which terms? Or a formal grammar, although I find syntax diagrams easier to read. These are the k…

---

## [Unable to do terms query](https://discuss.elastic.co/t/unable-to-do-terms-query/231937)

<div class="topic-metadata">

**Author:** [@ahmedbrandver](https://discuss.elastic.co/u/ahmedbrandver)\
**Replies:** 10\
**Last updated:** [May 12, 2020, 3:11pm UTC](https://discuss.elastic.co/t/unable-to-do-terms-query/231937 "2020-05-12T15:11:31Z")

</div>

I am unable to a terms query on my data when I check the mapping field type was text. Is there a way where I can do an IN query on this field. There is only single data which is an id of my different database.

---

## [Search after and nil values](https://discuss.elastic.co/t/search-after-and-nil-values/232246)

<div class="topic-metadata">

**Author:** [@apassant](https://discuss.elastic.co/u/apassant)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 2:40pm UTC](https://discuss.elastic.co/t/search-after-and-nil-values/232246 "2020-05-12T14:40:12Z")

</div>

Hi everyone! We're using search\_after to retrieve items from ES and have an issue with nil values. Specifically, we search for items sorted by date (last\_seen\_at), using internal\_id (indexed copy of \_id) as a tie-breake…

---

## [Cannot found inserted document after delete index](https://discuss.elastic.co/t/cannot-found-inserted-document-after-delete-index/232225)

<div class="topic-metadata">

**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 2:24pm UTC](https://discuss.elastic.co/t/cannot-found-inserted-document-after-delete-index/232225 "2020-05-12T14:24:18Z")

</div>

I write a simple test validate duplicates are not exist: @Test public void testSameDataNotPushedTwice() throws Exception { // Do some logic // index contains es index name // adding this line fail the test // dele…

---

## [Term Query on Keyword type which is part of a completion context did not work](https://discuss.elastic.co/t/term-query-on-keyword-type-which-is-part-of-a-completion-context-did-not-work/232197)

<div class="topic-metadata">

**Author:** [@alexisvisco](https://discuss.elastic.co/u/alexisvisco)\
**Replies:** 2\
**Last updated:** [May 12, 2020, 2:00pm UTC](https://discuss.elastic.co/t/term-query-on-keyword-type-which-is-part-of-a-completion-context-did-not-work/232197 "2020-05-12T14:00:41Z")

</div>

Hi community, I have a problem with a property named "hash" which is of type "keyword". This property is also used for a completion category context. ElasticSearch Version: docker.elastic.co/elasticsearch/elasticsearch-…

---

## [Error: master not discovered exception setting up cluster](https://discuss.elastic.co/t/error-master-not-discovered-exception-setting-up-cluster/232238)

<div class="topic-metadata">

**Author:** [@kawalec](https://discuss.elastic.co/u/kawalec)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 1:48pm UTC](https://discuss.elastic.co/t/error-master-not-discovered-exception-setting-up-cluster/232238 "2020-05-12T13:48:24Z")

</div>

Having all sorts of issues getting my cluster to work properly. using 7.6.1 On node1 I'm able to set my passwords on my machine without error. On node 2 and 3 I get ./elasticsearch-setup-passwords interactive Fail…

---

## [Docker-compose with xpack.notification.slack namespace](https://discuss.elastic.co/t/docker-compose-with-xpack-notification-slack-namespace/232224)

<div class="topic-metadata">

**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 12:18pm UTC](https://discuss.elastic.co/t/docker-compose-with-xpack-notification-slack-namespace/232224 "2020-05-12T12:18:23Z")

</div>

We are using docker based elasticsearch cluster. Inside docker-compose.yml, we pass all settings under environment key. We do not use elasticsearch.yml. We need to setup slack notifications for ES watchers. We have slac…

---

## [Max\_score is null when collapse field is used](https://discuss.elastic.co/t/max-score-is-null-when-collapse-field-is-used/232216)

<div class="topic-metadata">

**Author:** [@agutierrezrodriguez](https://discuss.elastic.co/u/agutierrezrodriguez)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 11:28am UTC](https://discuss.elastic.co/t/max-score-is-null-when-collapse-field-is-used/232216 "2020-05-12T11:28:00Z")

</div>

Hello! I found a bug calculating max\_score with a collapse field and with track\_scores set to true. How to replicate: Elasticsearch 7.6 (tested in official docker container) # Create empty index PUT /new\_index # Ins…

---

## [Using compare on a numaric field](https://discuss.elastic.co/t/using-compare-on-a-numaric-field/232219)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 11:31am UTC](https://discuss.elastic.co/t/using-compare-on-a-numaric-field/232219 "2020-05-12T11:31:15Z")

</div>

Hello, I am having trouble setting up an alert based on a numeric field. I am trying to send an alert when the field is above a certain threshold perhaps somebody could give me a hand. currently I have { "trigger…

---

## [Content-Type header \[application/x-www-form-urlencoded\] is not supported, "status":406](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/229528)

<div class="topic-metadata">

**Author:** [@DanielSTO](https://discuss.elastic.co/u/DanielSTO)\
**Replies:** 4\
**Last updated:** [May 12, 2020, 11:17am UTC](https://discuss.elastic.co/t/content-type-header-application-x-www-form-urlencoded-is-not-supported-status-406/229528 "2020-05-12T11:17:36Z")

</div>

Hello! I am trying to run a simple query that I have copied as a curl from kibana and I am Trying to run it on my windows comand line. My curl is: curl -XGET "http://localhost:9200/inspections/\_doc/\_search" -H 'Conten…

---

## [Prevent regex/wildcard query](https://discuss.elastic.co/t/prevent-regex-wildcard-query/232204)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 0\
**Last updated:** [May 12, 2020, 10:43am UTC](https://discuss.elastic.co/t/prevent-regex-wildcard-query/232204 "2020-05-12T10:43:13Z")

</div>

Hi, Is it possible to prevent a query sent to Elasticsearch that contains regex or wildcard? We have issues with a query that crashes the cluster using prefix wildcard and would like to prevent that from happening in t…

---

## [Aggregations returning null](https://discuss.elastic.co/t/aggregations-returning-null/232201)

<div class="topic-metadata">

**Author:** [@Bahadir\_Eyuboglu](https://discuss.elastic.co/u/Bahadir_Eyuboglu)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 10:38am UTC](https://discuss.elastic.co/t/aggregations-returning-null/232201 "2020-05-12T10:38:22Z")

</div>

here is my json file example that i indexed { "DCMs": \[ { "00180088": { "vr": "DS", "Value": \[ 6 \] } "12…

---

## [I need help asap please for fieldData](https://discuss.elastic.co/t/i-need-help-asap-please-for-fielddata/232144)

<div class="topic-metadata">

**Author:** [@esam\_bassam](https://discuss.elastic.co/u/esam_bassam)\
**Replies:** 6\
**Last updated:** [May 12, 2020, 10:04am UTC](https://discuss.elastic.co/t/i-need-help-asap-please-for-fielddata/232144 "2020-05-12T10:04:05Z")

</div>

I am wrote this code to make aggregation : public static void createIndex() throws IOException { CreateIndexRequest request = new CreateIndexRequest("testindexcreate2"); request.settings(Settings.builder() …

---

## [Match\_phrase\_prefix : Can only use phrase prefix queries on text fields](https://discuss.elastic.co/t/match-phrase-prefix-can-only-use-phrase-prefix-queries-on-text-fields/231807)

<div class="topic-metadata">

**Author:** [@harishmce2005](https://discuss.elastic.co/u/harishmce2005)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 9:51am UTC](https://discuss.elastic.co/t/match-phrase-prefix-can-only-use-phrase-prefix-queries-on-text-fields/231807 "2020-05-12T09:51:04Z")

</div>

I have upgraded one of our Elastic search version from 6.4.2 to 7.1.1. In one of our search query, we configured a 'match\_phrase\_prefix' on a 'keyword' type field and it was working in 6.4.2, please see the index struct…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=923)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=925)
