# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=946 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 947 --- ## [Odd Number of master nodes](https://discuss.elastic.co/t/odd-number-of-master-nodes/229396)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 2\ **Last updated:** [April 23, 2020, 10:52am UTC](https://discuss.elastic.co/t/odd-number-of-master-nodes/229396 "2020-04-23T10:52:48Z")
I was informed to use odd number of nodes to avoid split brain problem and also voting of master node is easy if the odd number of master nodes is configured. However, say the cluster is configured with 5 nodes and one … --- ## [Bulk request exception while connecting from event hub](https://discuss.elastic.co/t/bulk-request-exception-while-connecting-from-event-hub/229405)
**Author:** [@rampoq](https://discuss.elastic.co/u/rampoq)\ **Replies:** 1\ **Last updated:** [April 23, 2020, 9:34am UTC](https://discuss.elastic.co/t/bulk-request-exception-while-connecting-from-event-hub/229405 "2020-04-23T09:34:41Z")
I am trying to post data from apache kafka event hub to an elasticsearch cluster using the sink connector, but this issue occurs after creating the connector. --- ## [Elasticsearch Indexing based on data input](https://discuss.elastic.co/t/elasticsearch-indexing-based-on-data-input/228795)
**Author:** [@rampoq](https://discuss.elastic.co/u/rampoq)\ **Replies:** 7\ **Last updated:** [April 23, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-based-on-data-input/228795 "2020-04-23T09:09:44Z")
I wish to push documents in Json format and wish to update it based on the input data, to be specifiv like unique identifier present in data, ( if that unique identifier value is already present in indexed data, it shoul… --- ## [Disabling wildcard in query\_string or at index level](https://discuss.elastic.co/t/disabling-wildcard-in-query-string-or-at-index-level/229412)
**Author:** [@Federico\_Foschini](https://discuss.elastic.co/u/Federico_Foschini)\ **Replies:** 0\ **Last updated:** [April 23, 2020, 8:43am UTC](https://discuss.elastic.co/t/disabling-wildcard-in-query-string-or-at-index-level/229412 "2020-04-23T08:43:05Z")
Hello, Is it possible to disabling wildcards on a single index or directly in a query? Basically I'd like to do query like those: GET /\_search { "query": { "query\_string" : { … --- ## [How to speedup snapshot backup to s3?](https://discuss.elastic.co/t/how-to-speedup-snapshot-backup-to-s3/229249)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 1\ **Last updated:** [April 23, 2020, 7:30am UTC](https://discuss.elastic.co/t/how-to-speedup-snapshot-backup-to-s3/229249 "2020-04-23T07:30:56Z")
Is there any method or configuration to speed up the index snapshot backup to s3 in ES-7.6? --- ## [Elasticsearch logging to syslog](https://discuss.elastic.co/t/elasticsearch-logging-to-syslog/229398)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 0\ **Last updated:** [April 23, 2020, 7:25am UTC](https://discuss.elastic.co/t/elasticsearch-logging-to-syslog/229398 "2020-04-23T07:25:26Z")
Hi, I'm trying to find out why the garbage collection system of Elasticsearch is still logging to both syslog and /var/log/elasticsearch/gc.log. When I look at the command line options loaded in the process, I see -Xlo… --- ## [Elasticsarch Garbage Collection Issue](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211)
**Author:** [@sam0853](https://discuss.elastic.co/u/sam0853)\ **Replies:** 14\ **Last updated:** [April 23, 2020, 6:27am UTC](https://discuss.elastic.co/t/elasticsarch-garbage-collection-issue/229211 "2020-04-23T06:27:14Z")
Hi Team, I am continuously observing, my ES cluster goes into \[GC\] mode. Below is my cluster configuration, 3 datastore having below H/W configuration, 1: 8C/64GB/6TB 2: 8C/64GB/6TB 3: 8C/64GB/6TB Current Cluster S… --- ## [Ilm document count inconsistent rollover](https://discuss.elastic.co/t/ilm-document-count-inconsistent-rollover/229340)
**Author:** [@Michael\_Jackson1](https://discuss.elastic.co/u/Michael_Jackson1)\ **Replies:** 7\ **Last updated:** [April 23, 2020, 6:23am UTC](https://discuss.elastic.co/t/ilm-document-count-inconsistent-rollover/229340 "2020-04-23T06:23:05Z")
Testing a simple rollover on document count policy and am getting inconsistent results. 2 cpus, 8 GB ram, 1.9 GB heap, 2 nodes (a hot and warm), 0 replicas on a virtual machine note: I just starting looking into cluste… --- ## [KQL vs Lucene](https://discuss.elastic.co/t/kql-vs-lucene/229389)
**Author:** [@Nomek](https://discuss.elastic.co/u/Nomek)\ **Replies:** 0\ **Last updated:** [April 23, 2020, 6:12am UTC](https://discuss.elastic.co/t/kql-vs-lucene/229389 "2020-04-23T06:12:37Z")
Hello Guys, I found an interesting issue, where i found no clear explanation to and i hope you guys can help us. We are currently running 7.5.1 on dozens of clusters and i wonder what precisely is the differently behav… --- ## [Failed to put mappings on indices \[\[\[\]\]\], type \[string\] java.lang.IllegalArgumentException: Rejecting mapping update to \[\] as the final mapping would have more than 1 type: \[\_doc, string\]](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-type-string-java-lang-illegalargumentexception-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type-doc-string/229226)
**Author:** [@Jacques\_van\_der\_Merw](https://discuss.elastic.co/u/Jacques_van_der_Merw)\ **Replies:** 2\ **Last updated:** [April 22, 2020, 1:14pm UTC](https://discuss.elastic.co/t/failed-to-put-mappings-on-indices-type-string-java-lang-illegalargumentexception-rejecting-mapping-update-to-as-the-final-mapping-would-have-more-than-1-type-doc-string/229226 "2020-04-22T13:14:37Z")
I am getting this error only when I define an Index template on Kibana. I define an index template in order to define a lifecylce policy. The error is " failed to put mappings on indices \[\[\]\], type \[string\] java.lang… --- ## [Why doesn't elect master node?](https://discuss.elastic.co/t/why-doesnt-elect-master-node/229190)
**Author:** [@hgdo](https://discuss.elastic.co/u/hgdo)\ **Replies:** 8\ **Last updated:** [April 23, 2020, 4:55am UTC](https://discuss.elastic.co/t/why-doesnt-elect-master-node/229190 "2020-04-23T04:55:07Z")
Hi. I created a Elasticsearch cluster with 2 servers. Elasticsearch Cluster version is 7.6.2. Each server has three master nodes. I am currently doing a failover test. First, if you kill server 1 that has a master n… --- ## [Disk Capacity](https://discuss.elastic.co/t/disk-capacity/229224)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 9\ **Last updated:** [April 23, 2020, 4:48am UTC](https://discuss.elastic.co/t/disk-capacity/229224 "2020-04-23T04:48:03Z")
I have 3 nodes of Elasticsearch. The master node has 20 GB, the others have 12 GB. I check the path to store data of node 3, it shows full capacity. Can I check why node 3 is full? Is there any option for me to solve the… --- ## [7.3.1 After upgrading to 7.6.2, the cluster master freezes irregularly](https://discuss.elastic.co/t/7-3-1-after-upgrading-to-7-6-2-the-cluster-master-freezes-irregularly/228975)
**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\ **Replies:** 2\ **Last updated:** [April 23, 2020, 3:01am UTC](https://discuss.elastic.co/t/7-3-1-after-upgrading-to-7-6-2-the-cluster-master-freezes-irregularly/228975 "2020-04-23T03:01:52Z")
--- ## [Sink the output of an SQL Query back into an index in Elasticsearch](https://discuss.elastic.co/t/sink-the-output-of-an-sql-query-back-into-an-index-in-elasticsearch/229087)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 1\ **Last updated:** [April 23, 2020, 1:34am UTC](https://discuss.elastic.co/t/sink-the-output-of-an-sql-query-back-into-an-index-in-elasticsearch/229087 "2020-04-23T01:34:24Z")
Hello, Is it possible to write the output data of an SQL query result back into a new index in Elasticsearch? My use case I have two indices in our Elasticsearch cluster and have to perform JOIN operations to denormal… --- ## [Renaming an existing field in a nested object](https://discuss.elastic.co/t/renaming-an-existing-field-in-a-nested-object/228667)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 5\ **Last updated:** [April 23, 2020, 12:29am UTC](https://discuss.elastic.co/t/renaming-an-existing-field-in-a-nested-object/228667 "2020-04-23T00:29:41Z")
Hi! I need to rename an existing field in a nested object: "shared": { "type": "nested", "properties": { "user\_id": { "type": "long" }, "creation": { "type": "date", "format": "date\_hour\_minute\_second"… --- ## [TooManyBuckets Exception](https://discuss.elastic.co/t/toomanybuckets-exception/229176)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [April 22, 2020, 11:41pm UTC](https://discuss.elastic.co/t/toomanybuckets-exception/229176 "2020-04-22T23:41:29Z")
Hey I am using ES 7.3 with Kibana. I encountered this error in a few visualisations and I cannot figure out what is wrong. For example - I am trying to visual a time line of Bytes read/write per host. But I am gett… --- ## [Uploading license file](https://discuss.elastic.co/t/uploading-license-file/229136)
**Author:** [@perezs](https://discuss.elastic.co/u/perezs)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 9:22pm UTC](https://discuss.elastic.co/t/uploading-license-file/229136 "2020-04-22T21:22:52Z")
after uploading the license Kibana and elasticsearch are prompting for username and password. How do I unload the license file? --- ## [Multi node cluster with docker compose - please help](https://discuss.elastic.co/t/multi-node-cluster-with-docker-compose-please-help/229345)
**Author:** [@Venkatesh\_Murthy](https://discuss.elastic.co/u/Venkatesh_Murthy)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 7:36pm UTC](https://discuss.elastic.co/t/multi-node-cluster-with-docker-compose-please-help/229345 "2020-04-22T19:36:50Z")
i followed word by word instructions of this link.. https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html but my es02 container wont start .. it says failed to resolve host \[es01\] as follows: es0… --- ## [Need help optimizing index with 450mio entries](https://discuss.elastic.co/t/need-help-optimizing-index-with-450mio-entries/228879)
**Author:** [@sulo](https://discuss.elastic.co/u/sulo)\ **Replies:** 9\ **Last updated:** [April 22, 2020, 7:27pm UTC](https://discuss.elastic.co/t/need-help-optimizing-index-with-450mio-entries/228879 "2020-04-22T19:27:08Z")
Hi everybody, I have currently massive problems with my elasticsearch setup. I store aggregated google analytics data in elastic search for further processing. There are currently around 450mio documents in this index. … --- ## [Min\_doc\_count combined with order by average](https://discuss.elastic.co/t/min-doc-count-combined-with-order-by-average/229245)
**Author:** [@Christian\_Hansen\_Jam](https://discuss.elastic.co/u/Christian_Hansen_Jam)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 11:36am UTC](https://discuss.elastic.co/t/min-doc-count-combined-with-order-by-average/229245 "2020-04-22T11:36:34Z")
As the topic says, Im having problem sorting data when combining with min\_doc\_count with an average value. The data om working with is logfiles from a webserver. Two of the field are url.path and event.duration. My goa… --- ## [Uploading scooter data to Kibana (analyzing geo data later on)](https://discuss.elastic.co/t/uploading-scooter-data-to-kibana-analyzing-geo-data-later-on/229332)
**Author:** [@Infinity7](https://discuss.elastic.co/u/Infinity7)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 6:15pm UTC](https://discuss.elastic.co/t/uploading-scooter-data-to-kibana-analyzing-geo-data-later-on/229332 "2020-04-22T18:15:06Z")
Hello guys, I am very new to Kibana and would like to analyze scooter data to learn about: distance travelled per scooter, e.g. per day number of rides per scooter, e.g. per day position of the scooters (e.g. in a hea… --- ## [Filtering data returned from nested query](https://discuss.elastic.co/t/filtering-data-returned-from-nested-query/229321)
**Author:** [@Soberwolf](https://discuss.elastic.co/u/Soberwolf)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 5:03pm UTC](https://discuss.elastic.co/t/filtering-data-returned-from-nested-query/229321 "2020-04-22T17:03:01Z")
Hello, I am have a set of data in the following structure: \[ { "productId": "ProductId1", "customerNumbers": \[ "customer": { "name": "Prod1Cust1", … --- ## [Search latencies improve progressively each request after index refreshes](https://discuss.elastic.co/t/search-latencies-improve-progressively-each-request-after-index-refreshes/228772)
**Author:** [@hhsuey](https://discuss.elastic.co/u/hhsuey)\ **Replies:** 5\ **Last updated:** [April 22, 2020, 4:45pm UTC](https://discuss.elastic.co/t/search-latencies-improve-progressively-each-request-after-index-refreshes/228772 "2020-04-22T16:45:14Z")
I am running a single local instance of elasticsearch. I noticed after indexing is done, when I run a few of the same exact search queries, they get progressively faster. The first one is 80ms, the second 40ms, the third… --- ## [How to convert a date to string using local time](https://discuss.elastic.co/t/how-to-convert-a-date-to-string-using-local-time/229038)
**Author:** [@Miguel\_Cabero](https://discuss.elastic.co/u/Miguel_Cabero)\ **Replies:** 1\ **Last updated:** [April 22, 2020, 4:20pm UTC](https://discuss.elastic.co/t/how-to-convert-a-date-to-string-using-local-time/229038 "2020-04-22T16:20:00Z")
Hello, I need to compute a field that concats a string and a date. I don't know how to convert the date using the local time. Can you help getting desired results below? PUT my\_index/x { "ref": "x", "date" : "201… --- ## [Watcher Alerts to multiple users](https://discuss.elastic.co/t/watcher-alerts-to-multiple-users/229241)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 3\ **Last updated:** [April 22, 2020, 4:14pm UTC](https://discuss.elastic.co/t/watcher-alerts-to-multiple-users/229241 "2020-04-22T16:14:27Z")
Hi, Is it possible to configure watcher alerts to email users based on a role? If not, I dont have a distribution list so would like to be able to added and remove users form all watcher alerts without having to go thr… --- ## [X-Axis Time Shifts Between Kibana and Elasticsearch](https://discuss.elastic.co/t/x-axis-time-shifts-between-kibana-and-elasticsearch/229306)
**Author:** [@gtdkibana](https://discuss.elastic.co/u/gtdkibana)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 3:56pm UTC](https://discuss.elastic.co/t/x-axis-time-shifts-between-kibana-and-elasticsearch/229306 "2020-04-22T15:56:34Z")
Hello. Below is the results of an elasticsearch. Note the query, and the time range. The bars come in roughly 4 clusters. Note also the x-axis and the @timestamps per 5 minutes. Now, for values in the elastic sear… --- ## [Nested path with inner\_hits and complex logical operations](https://discuss.elastic.co/t/nested-path-with-inner-hits-and-complex-logical-operations/229300)
**Author:** [@jo\_dev](https://discuss.elastic.co/u/jo_dev)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 3:20pm UTC](https://discuss.elastic.co/t/nested-path-with-inner-hits-and-complex-logical-operations/229300 "2020-04-22T15:20:50Z")
I have document with following nested mapping -\> A -\> B -\> C While querying with following expression with inner\_hits to get matching part of the document -\> ((A.B.field1 == 1) AND (A.B.C.field2 == "Foo")) OR ((A.B.f… --- ## [Can't hit API on non-loopback IP](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048)
**Author:** [@hmcguire](https://discuss.elastic.co/u/hmcguire)\ **Replies:** 20\ **Last updated:** [April 22, 2020, 2:59pm UTC](https://discuss.elastic.co/t/cant-hit-api-on-non-loopback-ip/229048 "2020-04-22T14:59:55Z")
I have just setup a new dev 7.6.2 single-node cluster via rpm on centos 7 and am unable to curl the API on the non-loopback address. Curl to localhost works fine and I can also telnet to the default port of 9200 of the n… --- ## [Query multi index using Java API](https://discuss.elastic.co/t/query-multi-index-using-java-api/229278)
**Author:** [@Khanh\_Nguy\_n1](https://discuss.elastic.co/u/Khanh_Nguy_n1)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 2:17pm UTC](https://discuss.elastic.co/t/query-multi-index-using-java-api/229278 "2020-04-22T14:17:44Z")
Hi, I am trying to query on multiple indices using Java API. The wildcard expression is passed to the request like this String\[\] indices = client.indices().get(new GetIndexRequest().indices("prefix\_\*"), RequestOptions… --- ## [Segment merging on old indices](https://discuss.elastic.co/t/segment-merging-on-old-indices/229272)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 0\ **Last updated:** [April 22, 2020, 1:37pm UTC](https://discuss.elastic.co/t/segment-merging-on-old-indices/229272 "2020-04-22T13:37:02Z")
Hi, I've got a lot of daily indices and I'm not sure if Elasticsearch will perform any write actions on indices that aren't getting any new documents or updates, does it do anything like that? Thanks! [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=945) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=947)