# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=929

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 930

---

## [How to control how the indices distribute its shards to the data node?](https://discuss.elastic.co/t/how-to-control-how-the-indices-distribute-its-shards-to-the-data-node/231468)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 3\
**Last updated:** [May 8, 2020, 2:04am UTC](https://discuss.elastic.co/t/how-to-control-how-the-indices-distribute-its-shards-to-the-data-node/231468 "2020-05-08T02:04:16Z")

</div>

Hi all I have now a total of 4 data node, 1 i just recently added to the cluster. So now some of the indices in the cluster are moving its shard to that new node that i installed. but some how they are not evently distr…

---

## [What is considered a major/minor upgrade](https://discuss.elastic.co/t/what-is-considered-a-major-minor-upgrade/231644)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 2\
**Last updated:** [May 8, 2020, 1:46am UTC](https://discuss.elastic.co/t/what-is-considered-a-major-minor-upgrade/231644 "2020-05-08T01:46:45Z")

</div>

Hey, According to the documents The difference is that a minor upgrade takes you from 6.8.2 to 6.8.3, while a major upgrade takes you from 6.8 to 7.5. What is moving from 7.3.x to 7.6.x considered? Major of Minor? T…

---

## [Remove numbers from alpha numeric strings in indexed data](https://discuss.elastic.co/t/remove-numbers-from-alpha-numeric-strings-in-indexed-data/231642)

<div class="topic-metadata">

**Author:** [@manideep](https://discuss.elastic.co/u/manideep)\
**Replies:** 0\
**Last updated:** [May 8, 2020, 1:12am UTC](https://discuss.elastic.co/t/remove-numbers-from-alpha-numeric-strings-in-indexed-data/231642 "2020-05-08T01:12:27Z")

</div>

Hi All, I have list of usernames already indexed. John123 Paul456 XYZ987 ............. i want to update the documents with numbers removed. something like John Paul XYZ thanks, Manideep

---

## [Does Elasticsearch go to sleep when there are no requests for a couple of hours?](https://discuss.elastic.co/t/does-elasticsearch-go-to-sleep-when-there-are-no-requests-for-a-couple-of-hours/231632)

<div class="topic-metadata">

**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\
**Replies:** 8\
**Last updated:** [May 8, 2020, 1:00am UTC](https://discuss.elastic.co/t/does-elasticsearch-go-to-sleep-when-there-are-no-requests-for-a-couple-of-hours/231632 "2020-05-08T01:00:52Z")

</div>

My development sever is a windows machine, and I leave Elasticsearch running at the end of the day... I have noticed that, every time I start working the next day, the first search request from Elasticsearch does not ret…

---

## [Semantics: How are document\_type, mapping\_type, and mapping defined and different?](https://discuss.elastic.co/t/semantics-how-are-document-type-mapping-type-and-mapping-defined-and-different/231394)

<div class="topic-metadata">

**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\
**Replies:** 3\
**Last updated:** [May 8, 2020, 12:38am UTC](https://discuss.elastic.co/t/semantics-how-are-document-type-mapping-type-and-mapping-defined-and-different/231394 "2020-05-08T00:38:31Z")

</div>

I an indexing my documents with an explicit mapping that I have specified. These documents: have a document type (\_doc): a metadata label, the type of document being indexed. have a mapping: Either dynamically establis…

---

## [Migrate AWS ElasticSearch data from one domain to Another - Different versions](https://discuss.elastic.co/t/migrate-aws-elasticsearch-data-from-one-domain-to-another-different-versions/231601)

<div class="topic-metadata">

**Author:** [@mehak](https://discuss.elastic.co/u/mehak)\
**Replies:** 6\
**Last updated:** [May 7, 2020, 11:56pm UTC](https://discuss.elastic.co/t/migrate-aws-elasticsearch-data-from-one-domain-to-another-different-versions/231601 "2020-05-07T23:56:38Z")

</div>

Hi Everyone, I need to migrate AWS ElasticSearch data from one domain to another within same account, but both the domains have different versions of Elasticsearch i.e. migrate from 6.3 in one domain to 7.4 in another d…

---

## [Hybrid node SOs and how to migrate from Windows to Linux](https://discuss.elastic.co/t/hybrid-node-sos-and-how-to-migrate-from-windows-to-linux/231540)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 11:37pm UTC](https://discuss.elastic.co/t/hybrid-node-sos-and-how-to-migrate-from-windows-to-linux/231540 "2020-05-07T23:37:50Z")

</div>

Hello, we have a client that runs a 6 node cluster on VMs that runs Windows Server. We have the plan to migrate this cluster to Linux. I was wondering what the easiest approach would be, with zero downtime. My plan is …

---

## [Adding timeout and allowPartialSearchResults to query not timing out as expected](https://discuss.elastic.co/t/adding-timeout-and-allowpartialsearchresults-to-query-not-timing-out-as-expected/231636)

<div class="topic-metadata">

**Author:** [@BrianJenney](https://discuss.elastic.co/u/BrianJenney)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 11:20pm UTC](https://discuss.elastic.co/t/adding-timeout-and-allowpartialsearchresults-to-query-not-timing-out-as-expected/231636 "2020-05-07T23:20:56Z")

</div>

Using elasticearch client for nodejs v7.5.2: Adding a timeout to the query body like { "timeout": "1s" } eventually times out long requests but it takes far longer than 1 second for the query to actually timeout. In re…

---

## [Request must contain a kbn-xsrf header (kibana 7.1.0)](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header-kibana-7-1-0/231635)

<div class="topic-metadata">

**Author:** [@nzn\_cngz](https://discuss.elastic.co/u/nzn_cngz)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 11:00pm UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header-kibana-7-1-0/231635 "2020-05-07T23:00:11Z")

</div>

Hi all, ' I am using elastıcand kibana 7.1.0 version.Elasticsearch was working fine 2 days ago, now it gives kbn-xsrf error; Request must contain a kbn-xsrf header Could you please help me? U run command on Kibana c…

---

## [Dockerized ES Cluster multi node with one container/VM Problems](https://discuss.elastic.co/t/dockerized-es-cluster-multi-node-with-one-container-vm-problems/231594)

<div class="topic-metadata">

**Author:** [@DBond](https://discuss.elastic.co/u/DBond)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 10:18pm UTC](https://discuss.elastic.co/t/dockerized-es-cluster-multi-node-with-one-container-vm-problems/231594 "2020-05-07T22:18:16Z")

</div>

Dear Experts, Anybody has experience on how to have secured ES cluster with multi nodes, that each node is running on a docker container, and each docker container runs on a VM ? For example: VM1/DC1/N1 : ES1 and Kiba…

---

## [Scoring tagged documents with custom scores](https://discuss.elastic.co/t/scoring-tagged-documents-with-custom-scores/231224)

<div class="topic-metadata">

**Author:** [@Charles\_Lariviere](https://discuss.elastic.co/u/Charles_Lariviere)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 9:03pm UTC](https://discuss.elastic.co/t/scoring-tagged-documents-with-custom-scores/231224 "2020-05-07T21:03:14Z")

</div>

Hey folks, We're interested in customizing ElasticSearch relevance scoring by using our own relevance values for each tag that was added to a document. We're still early in our exploration process but would appreciate s…

---

## [AuthorizationException in Authorization header](https://discuss.elastic.co/t/authorizationexception-in-authorization-header/231407)

<div class="topic-metadata">

**Author:** [@Ketan\_Chachad](https://discuss.elastic.co/u/Ketan_Chachad)\
**Replies:** 2\
**Last updated:** [May 7, 2020, 8:39pm UTC](https://discuss.elastic.co/t/authorizationexception-in-authorization-header/231407 "2020-05-07T20:39:55Z")

</div>

Hi, I have a python service API that connects to an ES instance to query an index and return the query result. I was previously using ES on the same local machine and everything was working great. Due to disk space an…

---

## [Analyzer to every n characters](https://discuss.elastic.co/t/analyzer-to-every-n-characters/231618)

<div class="topic-metadata">

**Author:** [@ben-charles](https://discuss.elastic.co/u/ben-charles)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 8:39pm UTC](https://discuss.elastic.co/t/analyzer-to-every-n-characters/231618 "2020-05-07T20:39:44Z")

</div>

I currently have an analyzer using the regular expression \\\\W|\_. This splits by non-word chars and underscore. How will this handle other special characters from other languages? Furthermore, is there a way to configure…

---

## [Logstash - Elasticsearch 7.4 ILM](https://discuss.elastic.co/t/logstash-elasticsearch-7-4-ilm/223389)

<div class="topic-metadata">

**Author:** [@fvegaucr1](https://discuss.elastic.co/u/fvegaucr1)\
**Replies:** 4\
**Last updated:** [May 7, 2020, 8:22pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-7-4-ilm/223389 "2020-05-07T20:22:21Z")

</div>

Hi Im trying to set up ILM for my indices. But just want to confirm that what Im doing is ok. First we have 4 locations in differents parts of the world. We use filebeat to get the logs and send it to a kafka cluster un…

---

## [Exception in thread "Elasticsearch initialization thread" java.lang.RuntimeException: ElasticsearchException\[failed to initialize a TrustManagerFactory\]; nested: NoSuchFileException\[/home/brunei/elasticsearch-6.5.0/config/ca/ca.crt\];](https://discuss.elastic.co/t/exception-in-thread-elasticsearch-initialization-thread-java-lang-runtimeexception-elasticsearchexception-failed-to-initialize-a-trustmanagerfactory-nested-nosuchfileexception-home-brunei-elasticsearch-6-5-0-config-ca-ca-crt/231617)

<div class="topic-metadata">

**Author:** [@Ankit\_Goyal](https://discuss.elastic.co/u/Ankit_Goyal)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 8:08pm UTC](https://discuss.elastic.co/t/exception-in-thread-elasticsearch-initialization-thread-java-lang-runtimeexception-elasticsearchexception-failed-to-initialize-a-trustmanagerfactory-nested-nosuchfileexception-home-brunei-elasticsearch-6-5-0-config-ca-ca-crt/231617 "2020-05-07T20:08:09Z")

</div>

Exception in thread "Elasticsearch initialization thread" java.lang.RuntimeException: ElasticsearchException\[failed to initialize a TrustManagerFactory\]; nested: NoSuchFileException\[/home/brunei/elasticsearch-6.5.0/confi…

---

## [Elasticsearch v7.6.2 Failed to Start, Killed by SIGABRT on RHEL 7.7 - \[URGENT\]](https://discuss.elastic.co/t/elasticsearch-v7-6-2-failed-to-start-killed-by-sigabrt-on-rhel-7-7-urgent/231039)

<div class="topic-metadata">

**Author:** [@Black-Hat](https://discuss.elastic.co/u/Black-Hat)\
**Replies:** 12\
**Last updated:** [May 7, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-v7-6-2-failed-to-start-killed-by-sigabrt-on-rhel-7-7-urgent/231039 "2020-05-07T18:48:39Z")

</div>

Hi All, I'm having issue to start elastic services with error of: Job for elasticsearch.service failed because a fatal signal was delivered to the control process. This is a completely new setup and I tried to con…

---

## [Exact match to string](https://discuss.elastic.co/t/exact-match-to-string/231606)

<div class="topic-metadata">

**Author:** [@prince\_yadav](https://discuss.elastic.co/u/prince_yadav)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 6:38pm UTC](https://discuss.elastic.co/t/exact-match-to-string/231606 "2020-05-07T18:38:08Z")

</div>

I have a name field which has string value like Blue Latest Product (NKK-1294) Pink Black Product (NKK-1233) Black Pink Stone (SKK-129) If I search { "query": { "bool": { "must": \[ { "bool": { "should": \[ { …

---

## [Date format with timezone offset](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576)

<div class="topic-metadata">

**Author:** [@Xavier\_Romero](https://discuss.elastic.co/u/Xavier_Romero)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 6:07pm UTC](https://discuss.elastic.co/t/date-format-with-timezone-offset/231576 "2020-05-07T18:07:41Z")

</div>

Hi there, Having a hard time to parse a date with zone offset. I need to parse dates like this: "2020-05-07 13:16:44+00:00" So far, I've tried: PUT /\_template/test { "index\_patterns": \["test"\], "mappings": { "p…

---

## [Problem with setting up ES 7.6.2 instance on Docker](https://discuss.elastic.co/t/problem-with-setting-up-es-7-6-2-instance-on-docker/231600)

<div class="topic-metadata">

**Author:** [@Arkasian](https://discuss.elastic.co/u/Arkasian)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 5:54pm UTC](https://discuss.elastic.co/t/problem-with-setting-up-es-7-6-2-instance-on-docker/231600 "2020-05-07T17:54:10Z")

</div>

Dear Experts and Community, I have the following problem. I pull a ES image from Docker Hub, then I configure it to bind ports to host: 9200,9300. I add the following env var: cluster.initial\_master\_nodes = elasticsear…

---

## [Keyword subfield of a text field which has high cardinality](https://discuss.elastic.co/t/keyword-subfield-of-a-text-field-which-has-high-cardinality/231599)

<div class="topic-metadata">

**Author:** [@lloadingll](https://discuss.elastic.co/u/lloadingll)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 5:42pm UTC](https://discuss.elastic.co/t/keyword-subfield-of-a-text-field-which-has-high-cardinality/231599 "2020-05-07T17:42:41Z")

</div>

Hi all, we have a large amount of data, one of its fields is 'email subject' which is 'text' type. Recently I want to do aggregation by this field on a small subset of the data (assume after the query filter there are …

---

## [Error in ES keystore when elasticsearch.yml references custom variables in /etc/default/elasticsearch](https://discuss.elastic.co/t/error-in-es-keystore-when-elasticsearch-yml-references-custom-variables-in-etc-default-elasticsearch/230592)

<div class="topic-metadata">

**Author:** [@gchiartosini](https://discuss.elastic.co/u/gchiartosini)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 5:28pm UTC](https://discuss.elastic.co/t/error-in-es-keystore-when-elasticsearch-yml-references-custom-variables-in-etc-default-elasticsearch/230592 "2020-05-07T17:28:55Z")

</div>

Hello, can anyone help with this weird problem, please? I have defined custom variables in /etc/default/elasticsearch file, and referenced them in the elasticsearch.yml; ES works with them properly, but I get an error …

---

## [Elasticsearch TLS setup errors](https://discuss.elastic.co/t/elasticsearch-tls-setup-errors/231558)

<div class="topic-metadata">

**Author:** [@ahabah](https://discuss.elastic.co/u/ahabah)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 5:11pm UTC](https://discuss.elastic.co/t/elasticsearch-tls-setup-errors/231558 "2020-05-07T17:11:34Z")

</div>

Hi, I setup elasticsearch on centos 3-nodes cluster. It worked well until I enabled xpack. I'm using .crt, .key, and ca.crt certs. Here are my config entries: xpack.security.enabled: true xpack.security.http.ssl.enable…

---

## [Elastic cloud one 58 GB node vs AWS ES 4 nodes with 8 GB of memory each performance](https://discuss.elastic.co/t/elastic-cloud-one-58-gb-node-vs-aws-es-4-nodes-with-8-gb-of-memory-each-performance/231532)

<div class="topic-metadata">

**Author:** [@bogdan\_dd](https://discuss.elastic.co/u/bogdan_dd)\
**Replies:** 5\
**Last updated:** [May 7, 2020, 4:43pm UTC](https://discuss.elastic.co/t/elastic-cloud-one-58-gb-node-vs-aws-es-4-nodes-with-8-gb-of-memory-each-performance/231532 "2020-05-07T16:43:41Z")

</div>

Hi, I'm planning to use an elastic cloud for my project but I have some confusion about what is the right way to configure my elasticsearch architecture, according to price calculator https://cloud.elastic.co/pricing in …

---

## [Parsing Failure with Elasticsearch Index Mapping](https://discuss.elastic.co/t/parsing-failure-with-elasticsearch-index-mapping/231586)

<div class="topic-metadata">

**Author:** [@zsanford](https://discuss.elastic.co/u/zsanford)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 4:31pm UTC](https://discuss.elastic.co/t/parsing-failure-with-elasticsearch-index-mapping/231586 "2020-05-07T16:31:15Z")

</div>

I have a Graylog server setup with Elasticsearch and every so often when it creates a new index, I start getting indexer failure messages in Graylog. The error message type is “mapper\_parsing\_exception” and it is always …

---

## [Scripted bulk upserting issue](https://discuss.elastic.co/t/scripted-bulk-upserting-issue/231351)

<div class="topic-metadata">

**Author:** [@matija\_str](https://discuss.elastic.co/u/matija_str)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 3:20pm UTC](https://discuss.elastic.co/t/scripted-bulk-upserting-issue/231351 "2020-05-07T15:20:35Z")

</div>

Hi everyone. A few days ago we noticed a strange behavior in our indexing pipeline. We are using painless scripts in combination with bulk API to perform 1:N relationship document merge-operations. We noticed that when…

---

## [How to apply time filter for the time fields in the index](https://discuss.elastic.co/t/how-to-apply-time-filter-for-the-time-fields-in-the-index/231564)

<div class="topic-metadata">

**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 2:45pm UTC](https://discuss.elastic.co/t/how-to-apply-time-filter-for-the-time-fields-in-the-index/231564 "2020-05-07T14:45:26Z")

</div>

I have 3 time fields in my index , I know to create a timestamp for one time field, wondering if there is a possibility to apply the time filter two other fields which to apply time filter to it as well ! Time\_stamp …

---

## [Indexing encrypted documents](https://discuss.elastic.co/t/indexing-encrypted-documents/231559)

<div class="topic-metadata">

**Author:** [@spreitzer](https://discuss.elastic.co/u/spreitzer)\
**Replies:** 1\
**Last updated:** [May 7, 2020, 2:28pm UTC](https://discuss.elastic.co/t/indexing-encrypted-documents/231559 "2020-05-07T14:28:11Z")

</div>

Hi I would like to point out after reading through several closed discussions in this forum that indexing of encrypted documents is achievable but AFAIK not implemented (yet). Some discussions in this forum refer to thi…

---

## [Encrypting data at Rest is achievable](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513)

<div class="topic-metadata">

**Author:** [@spreitzer](https://discuss.elastic.co/u/spreitzer)\
**Replies:** 3\
**Last updated:** [May 7, 2020, 2:07pm UTC](https://discuss.elastic.co/t/encrypting-data-at-rest-is-achievable/231513 "2020-05-07T14:07:55Z")

</div>

Hi I would like to point out after reading through several closed discussions in this forum that encryption at Rest is achievable but AFAIK not implemented (yet). Some discussions in this forum refer to this problem and…

---

## [Unexpected end-of-input: expected close marker for Array](https://discuss.elastic.co/t/unexpected-end-of-input-expected-close-marker-for-array/231555)

<div class="topic-metadata">

**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 1:51pm UTC](https://discuss.elastic.co/t/unexpected-end-of-input-expected-close-marker-for-array/231555 "2020-05-07T13:51:55Z")

</div>

Hi I am getting following error Unexpected end-of-input: expected close marker for Array (start marker at \[Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@21e2dfc9; line: 19, column: 27\])\\n at \[Source: org…

---

## [How to get Value of a Specific field inside a Nested Field](https://discuss.elastic.co/t/how-to-get-value-of-a-specific-field-inside-a-nested-field/231544)

<div class="topic-metadata">

**Author:** [@ckough](https://discuss.elastic.co/u/ckough)\
**Replies:** 0\
**Last updated:** [May 7, 2020, 1:13pm UTC](https://discuss.elastic.co/t/how-to-get-value-of-a-specific-field-inside-a-nested-field/231544 "2020-05-07T13:13:10Z")

</div>

Hi i have created a mapping that looks like this: PUT /mylogs\_1/\_mapping { "properties": { "logEvents": { "type": "nested", "properties": { "id": { "type": "text", "fields"…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=928)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=930)
