# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=931

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 932

---

## [Elected master node doesn't communicate with other master nodes within expected time](https://discuss.elastic.co/t/elected-master-node-doesnt-communicate-with-other-master-nodes-within-expected-time/231375)

<div class="topic-metadata">

**Author:** [@rangerdanger](https://discuss.elastic.co/u/rangerdanger)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 6:40pm UTC](https://discuss.elastic.co/t/elected-master-node-doesnt-communicate-with-other-master-nodes-within-expected-time/231375 "2020-05-06T18:40:04Z")

</div>

Describe the feature: Elasticsearch version (bin/elasticsearch --version): 7.5.2 OS version (uname -a if on a Unix-like system): CentOs 7 - 3.10.0-1062.18.1.el7.x86\_64 Description of the problem including expected ver…

---

## [How to avoid 30,000ms timeout during reindexing](https://discuss.elastic.co/t/how-to-avoid-30-000ms-timeout-during-reindexing/231370)

<div class="topic-metadata">

**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 6:27pm UTC](https://discuss.elastic.co/t/how-to-avoid-30-000ms-timeout-during-reindexing/231370 "2020-05-06T18:27:14Z")

</div>

While performing reindex operation, I am setting the request timeout to be 60 mins as below request.setTimeout(TimeValue. timeValueMinutes (60)); With the above config in place my request is still timing out for 30,000…

---

## [How to check/query only the first element of a nested field?](https://discuss.elastic.co/t/how-to-check-query-only-the-first-element-of-a-nested-field/231311)

<div class="topic-metadata">

**Author:** [@Bart\_de\_Man](https://discuss.elastic.co/u/Bart_de_Man)\
**Replies:** 3\
**Last updated:** [May 6, 2020, 2:58pm UTC](https://discuss.elastic.co/t/how-to-check-query-only-the-first-element-of-a-nested-field/231311 "2020-05-06T14:58:17Z")

</div>

Elasticsearch version ( bin/elasticsearch --version ): 5.6.11 Plugins installed : JVM version ( java -version ): openjdk version "1.8.0\_222" OpenJDK Runtime Environment (build 1.8.0\_222-8u222-b10-1ubuntu1~16.04.1-b1…

---

## [Browse sorted terms](https://discuss.elastic.co/t/browse-sorted-terms/231360)

<div class="topic-metadata">

**Author:** [@zazasa](https://discuss.elastic.co/u/zazasa)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 2:23pm UTC](https://discuss.elastic.co/t/browse-sorted-terms/231360 "2020-05-06T14:23:07Z")

</div>

Hi. Let's say i have a set of document with common personal information like: { "name": "Samuel", "Job": "Engineer", .... } My customer want to browse through all the terms in the "name" field, sta…

---

## [Procedure to change role of a node](https://discuss.elastic.co/t/procedure-to-change-role-of-a-node/231345)

<div class="topic-metadata">

**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 2:14pm UTC](https://discuss.elastic.co/t/procedure-to-change-role-of-a-node/231345 "2020-05-06T14:14:01Z")

</div>

I have 2 master and 1 data node in my cluster. I want to make all the three nodes as master\\data nodes. What is the procedure to change the role? What are all the things to keep in mind while changing the role?

---

## [Use value of a field as timezone in range query](https://discuss.elastic.co/t/use-value-of-a-field-as-timezone-in-range-query/231347)

<div class="topic-metadata">

**Author:** [@Quang\_D\_Tr\_n](https://discuss.elastic.co/u/Quang_D_Tr_n)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 1:27pm UTC](https://discuss.elastic.co/t/use-value-of-a-field-as-timezone-in-range-query/231347 "2020-05-06T13:27:17Z")

</div>

My index has two fields: "local\_time": "2020-04-28T11:00:52.000-0500" as date and "timezone": "America/Bogota" as string. The local\_time stores various timezones. I want to search for the same time range but in differen…

---

## [Encryption at rest - required platinum license](https://discuss.elastic.co/t/encryption-at-rest-required-platinum-license/231184)

<div class="topic-metadata">

**Author:** [@chiara](https://discuss.elastic.co/u/chiara)\
**Replies:** 5\
**Last updated:** [May 6, 2020, 1:07pm UTC](https://discuss.elastic.co/t/encryption-at-rest-required-platinum-license/231184 "2020-05-06T13:07:31Z")

</div>

Can I use dm-crypt to encrypt data at rest if I do not have a Platinum license? I need to understand what is the advantage of the Platinum license for this specific feature. Thank you in advance

---

## [ELK Watcher Input condition question](https://discuss.elastic.co/t/elk-watcher-input-condition-question/231275)

<div class="topic-metadata">

**Author:** [@rj23495](https://discuss.elastic.co/u/rj23495)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 12:35pm UTC](https://discuss.elastic.co/t/elk-watcher-input-condition-question/231275 "2020-05-06T12:35:49Z")

</div>

Currently, i am trying to write a condition where in if that metricname (condition should be must)in the logs is not encountered in last 1m then perform an action. But it seems to fetching metricnames based on words and …

---

## [Elasticsearch is not running on Linux VM](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux-vm/231079)

<div class="topic-metadata">

**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\
**Replies:** 3\
**Last updated:** [May 5, 2020, 6:14am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-running-on-linux-vm/231079 "2020-05-05T06:14:43Z")

</div>

Hi, @LizaD I am trying to run Elasticsearch on my Linux VM. but it shows the following status sudo systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/sys…

---

## [Creating a scripted field in nested query](https://discuss.elastic.co/t/creating-a-scripted-field-in-nested-query/231332)

<div class="topic-metadata">

**Author:** [@balu\_23](https://discuss.elastic.co/u/balu_23)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 11:46am UTC](https://discuss.elastic.co/t/creating-a-scripted-field-in-nested-query/231332 "2020-05-06T11:46:47Z")

</div>

I have a document like: \> "\_index": "nested\_obj\_demo", "\_type": "\_doc", "\_id": "1", "\_score": 1, "\_source": { "price": 125, …

---

## [Highlight issue on field with custom analyzer](https://discuss.elastic.co/t/highlight-issue-on-field-with-custom-analyzer/231061)

<div class="topic-metadata">

**Author:** [@jasoncodingguru](https://discuss.elastic.co/u/jasoncodingguru)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 11:40am UTC](https://discuss.elastic.co/t/highlight-issue-on-field-with-custom-analyzer/231061 "2020-05-06T11:40:46Z")

</div>

Hey guys, We are having issues on fields with custom analyzer when using highlight feature. The field value is like "1kg", the customer analyzer will process and generate tokens including "1", "kg", "kilogram" as we als…

---

## [Performance degrading because of ThreadLocal](https://discuss.elastic.co/t/performance-degrading-because-of-threadlocal/227883)

<div class="topic-metadata">

**Author:** [@111222](https://discuss.elastic.co/u/111222)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 11:23am UTC](https://discuss.elastic.co/t/performance-degrading-because-of-threadlocal/227883 "2020-05-06T11:23:39Z")

</div>

We've been experiencing the same problem as described in topic https://discuss.elastic.co/t/indexing-performance-degrading-over-time/40229/26. Our setup is elasticsearch 7.1.1 + java 11.0.3. Is the solution, using CMS …

---

## [Modifying search response from elastic search](https://discuss.elastic.co/t/modifying-search-response-from-elastic-search/230012)

<div class="topic-metadata">

**Author:** [@Satya\_Tipathy](https://discuss.elastic.co/u/Satya_Tipathy)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 11:11am UTC](https://discuss.elastic.co/t/modifying-search-response-from-elastic-search/230012 "2020-05-06T11:11:31Z")

</div>

Hi, We are currently migrating from SOLR to Elastic Search currently front-end layer is consuming the response from SOLR. Now once we migrate to Elastic Search, the json contract for the search results are going to chan…

---

## [Update ELK to 7.6](https://discuss.elastic.co/t/update-elk-to-7-6/231322)

<div class="topic-metadata">

**Author:** [@Manan7](https://discuss.elastic.co/u/Manan7)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 10:49am UTC](https://discuss.elastic.co/t/update-elk-to-7-6/231322 "2020-05-06T10:49:21Z")

</div>

Hi, I am on 5.5.2 which is out of support. I would like to upgrade entire ELK stack including beats. I am not sure if it's possible or not? Is it doable? Are there any breaking changes? Thanks Manan

---

## [Analysis large log data in Elasticsearch](https://discuss.elastic.co/t/analysis-large-log-data-in-elasticsearch/231319)

<div class="topic-metadata">

**Author:** [@lioaslan](https://discuss.elastic.co/u/lioaslan)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 10:28am UTC](https://discuss.elastic.co/t/analysis-large-log-data-in-elasticsearch/231319 "2020-05-06T10:28:40Z")

</div>

Hi, Like the title says, I have a task that I have to analysis a large data with Elasticsearch. I know that the more data's larger, the more ram use. I find out a way to reduce using ram. I make 2 indices: First in…

---

## [What is the "setTypes" method of TransportClient Object?](https://discuss.elastic.co/t/what-is-the-settypes-method-of-transportclient-object/231272)

<div class="topic-metadata">

**Author:** [@abhir83](https://discuss.elastic.co/u/abhir83)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 10:15am UTC](https://discuss.elastic.co/t/what-is-the-settypes-method-of-transportclient-object/231272 "2020-05-06T10:15:00Z")

</div>

Hello Friends, What is the "setTypes" method of TransportClient Object? //Code Line Here client.prepareSearch(this.index).setTypes("datum") '''----\>What is "datum" here? Thanks....

---

## [Conditional sorting of hits](https://discuss.elastic.co/t/conditional-sorting-of-hits/231310)

<div class="topic-metadata">

**Author:** [@mhoegh](https://discuss.elastic.co/u/mhoegh)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 9:51am UTC](https://discuss.elastic.co/t/conditional-sorting-of-hits/231310 "2020-05-06T09:51:02Z")

</div>

I've a index with road names. My settings look like this: { "settings": { "max\_ngram\_diff": 20, "analysis": { "analyzer": { "str\_search\_analyzer": { "type": "custom", "tokeniz…

---

## [Random SortScript with Session ID](https://discuss.elastic.co/t/random-sortscript-with-session-id/231307)

<div class="topic-metadata">

**Author:** [@PaulMcGregory](https://discuss.elastic.co/u/PaulMcGregory)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 9:36am UTC](https://discuss.elastic.co/t/random-sortscript-with-session-id/231307 "2020-05-06T09:36:29Z")

</div>

Hi, i am trying to get a random sorting by using this CustomSortScript 'source' =\> '(doc\[\\'isPremium\\'\].value == false ? 0 : 1 ) \* (doc\[\\'uid\\'\].value \* ' . substr($sessionCrc, 0, 5 ) . ')' It works and it is getting …

---

## [Case Insensitive search for all the fields](https://discuss.elastic.co/t/case-insensitive-search-for-all-the-fields/231274)

<div class="topic-metadata">

**Author:** [@sunkara](https://discuss.elastic.co/u/sunkara)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 9:26am UTC](https://discuss.elastic.co/t/case-insensitive-search-for-all-the-fields/231274 "2020-05-06T09:26:17Z")

</div>

Please suggest me ,search is not working because its case sensitive,how can I implement case Insensitive and I have to perform search on all the fields

---

## [Location of Index Template, pipeline processors and workflow](https://discuss.elastic.co/t/location-of-index-template-pipeline-processors-and-workflow/231294)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 8:42am UTC](https://discuss.elastic.co/t/location-of-index-template-pipeline-processors-and-workflow/231294 "2020-05-06T08:42:45Z")

</div>

I was going through the workflow of ELK stack and bit confused on which is required in which stack etc. ( I was mostly looking into a Public Dataset example from official github examples) (a) The example uses filebeat …

---

## [Load is not distributed across the nodes](https://discuss.elastic.co/t/load-is-not-distributed-across-the-nodes/231267)

<div class="topic-metadata">

**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\
**Replies:** 11\
**Last updated:** [May 6, 2020, 8:04am UTC](https://discuss.elastic.co/t/load-is-not-distributed-across-the-nodes/231267 "2020-05-06T08:04:02Z")

</div>

Hi We are using elasticsearch 7.6.2. We see that load is not distributed across the nodes.

---

## [About the java api to get the index stats](https://discuss.elastic.co/t/about-the-java-api-to-get-the-index-stats/227460)

<div class="topic-metadata">

**Author:** [@ted\_ye](https://discuss.elastic.co/u/ted_ye)\
**Replies:** 2\
**Last updated:** [May 6, 2020, 7:41am UTC](https://discuss.elastic.co/t/about-the-java-api-to-get-the-index-stats/227460 "2020-05-06T07:41:40Z")

</div>

Hello, I want to find the java api about Index stats API ,but I can't find in Java High Level REST Client document... So how to use java api to get the index stats? I want to get the storage of the index . thanks.

---

## [How to restore Snapshot from SLM](https://discuss.elastic.co/t/how-to-restore-snapshot-from-slm/231243)

<div class="topic-metadata">

**Author:** [@Madhu\_Cherukuri](https://discuss.elastic.co/u/Madhu_Cherukuri)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 7:23am UTC](https://discuss.elastic.co/t/how-to-restore-snapshot-from-slm/231243 "2020-05-06T07:23:01Z")

</div>

Hello Team, I am able to schedule SLM for my latest elasticsearch 7.x , but could you please help to know how to restore it to elasticseach when needed Regards, Madhu

---

## [Enabling xpack and binding kibana to a non loopback ip makes it unreachable from another workspace](https://discuss.elastic.co/t/enabling-xpack-and-binding-kibana-to-a-non-loopback-ip-makes-it-unreachable-from-another-workspace/231262)

<div class="topic-metadata">

**Author:** [@syost](https://discuss.elastic.co/u/syost)\
**Replies:** 9\
**Last updated:** [May 6, 2020, 7:22am UTC](https://discuss.elastic.co/t/enabling-xpack-and-binding-kibana-to-a-non-loopback-ip-makes-it-unreachable-from-another-workspace/231262 "2020-05-06T07:22:14Z")

</div>

I'm following a tutorial you provide as part of your "learn at home" initiative called "Fundamentals of Securing Elasticsearch". I'm actually following along in my own environment. I have a AWS workspace setup and one EC…

---

## [Should insert to new index or update existed documents with large data in ElasticSearch?](https://discuss.elastic.co/t/should-insert-to-new-index-or-update-existed-documents-with-large-data-in-elasticsearch/231280)

<div class="topic-metadata">

**Author:** [@Hi\_u\_Nguy\_n](https://discuss.elastic.co/u/Hi_u_Nguy_n)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 6:56am UTC](https://discuss.elastic.co/t/should-insert-to-new-index-or-update-existed-documents-with-large-data-in-elasticsearch/231280 "2020-05-06T06:56:03Z")

</div>

Hello, I have a task, Read very large log from agent send to elasticsearch (i use fluent-bit) in real-time But, I need modify each record to add my tags by specific condition on each documents (function add\_tags(doc) …

---

## [Is the order of execution of requests inside bulk request is always constant?](https://discuss.elastic.co/t/is-the-order-of-execution-of-requests-inside-bulk-request-is-always-constant/231278)

<div class="topic-metadata">

**Author:** [@guruprasadkk](https://discuss.elastic.co/u/guruprasadkk)\
**Replies:** 1\
**Last updated:** [May 6, 2020, 6:49am UTC](https://discuss.elastic.co/t/is-the-order-of-execution-of-requests-inside-bulk-request-is-always-constant/231278 "2020-05-06T06:49:57Z")

</div>

If I have a document with just one field called "subject" and I create three update requests for same document. update request1(with upsert as entire doc):- Creates document1 with subject "abcd" Update request2: Updat…

---

## [Keep getting error when set watcher email action, elastic 7.5.1 on docker](https://discuss.elastic.co/t/keep-getting-error-when-set-watcher-email-action-elastic-7-5-1-on-docker/231276)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 6:34am UTC](https://discuss.elastic.co/t/keep-getting-error-when-set-watcher-email-action-elastic-7-5-1-on-docker/231276 "2020-05-06T06:34:18Z")

</div>

Hi, I have three master nodes of elastic 7.5.1 running on docker, in each elasticsearch.yml, I have added this conf xpack.notification.email.account: outlook\_account: profile: outlook smtp: …

---

## [Kibana data suddenly got missing!](https://discuss.elastic.co/t/kibana-data-suddenly-got-missing/230943)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 16\
**Last updated:** [May 6, 2020, 5:59am UTC](https://discuss.elastic.co/t/kibana-data-suddenly-got-missing/230943 "2020-05-06T05:59:05Z")

</div>

Today morning when I've tried to open my Kibana, I found the following error in my browser. Then I've restarted Kibana. But after the restart, all of my indexes have been gone. After that, to view all my works such…

---

## [Cologne vs. koelnerphonetic - What's the difference?](https://discuss.elastic.co/t/cologne-vs-koelnerphonetic-whats-the-difference/231268)

<div class="topic-metadata">

**Author:** [@Clemens\_Lackner](https://discuss.elastic.co/u/Clemens_Lackner)\
**Replies:** 0\
**Last updated:** [May 6, 2020, 5:52am UTC](https://discuss.elastic.co/t/cologne-vs-koelnerphonetic-whats-the-difference/231268 "2020-05-06T05:52:05Z")

</div>

We're currently adding phonetic search support to our application by extending our elasticsearch mappings. As we have a german customer, we want to apply the cologne phonetic algorithm . When I check the available phon…

---

## [Cant create snapshot life cycle policy](https://discuss.elastic.co/t/cant-create-snapshot-life-cycle-policy/231081)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 6\
**Last updated:** [May 6, 2020, 5:22am UTC](https://discuss.elastic.co/t/cant-create-snapshot-life-cycle-policy/231081 "2020-05-06T05:22:53Z")

</div>

Hey All, Trying to create snapshot life cycle policy according to the knowledge article PUT /\_slm/policy/daily-snapshots { "schedule": "0 30 12 \* \* ?", "name": "snapshot-daily-snap-{now/d}", "repository": "elas…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=930)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=932)
