# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=986 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 987 --- ## [Rest api in elasticsearch plugin](https://discuss.elastic.co/t/rest-api-in-elasticsearch-plugin/223761)
**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 1:57pm UTC](https://discuss.elastic.co/t/rest-api-in-elasticsearch-plugin/223761 "2020-03-16T13:57:21Z")
i just created an elasticsearch plugin which exports GIS reports every day at 00:00 , now i'd like to add a button in my UI to invoke the report creation on demand my question, is it possible to expose a rest api in thi… --- ## [Setup with multiple ElasticSearch in one VM](https://discuss.elastic.co/t/setup-with-multiple-elasticsearch-in-one-vm/223763)
**Author:** [@Gopi\_Sumanth](https://discuss.elastic.co/u/Gopi_Sumanth)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 1:56pm UTC](https://discuss.elastic.co/t/setup-with-multiple-elasticsearch-in-one-vm/223763 "2020-03-16T13:56:09Z")
I am using elastic-7.6.1. I am trying to setup elastic cluster locally in vm with two masters and one slave. I have downloaded tar file and extracted into 3 different locations and modified the elasticsearch.yml with th… --- ## [Standard TokenizerFactory deprecated in Elasticsearch Java API v7?](https://discuss.elastic.co/t/standard-tokenizerfactory-deprecated-in-elasticsearch-java-api-v7/223427)
**Author:** [@munasia](https://discuss.elastic.co/u/munasia)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 1:50pm UTC](https://discuss.elastic.co/t/standard-tokenizerfactory-deprecated-in-elasticsearch-java-api-v7/223427 "2020-03-16T13:50:50Z")
Currently performing an Elasticsearch upgrade from v1.7 to v7.1. While refactoring our Java code, I came across this Elasticsearch v1.7 code: private static final TokenizerFactory STANDARD\_TOKENIZER\_FACTORY = … --- ## [Elasticsearch run as service](https://discuss.elastic.co/t/elasticsearch-run-as-service/223369)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 1:49pm UTC](https://discuss.elastic.co/t/elasticsearch-run-as-service/223369 "2020-03-16T13:49:37Z")
I installed elasticsearch with a tar.gz package. I want to run as a service so that es can run automatically when the system reboots. How should I set it up? elasticsearch: 7.6 os: centos7 Instead of using rpm, we n… --- ## [Values are not showing correctly when used aggs sort](https://discuss.elastic.co/t/values-are-not-showing-correctly-when-used-aggs-sort/221807)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 6\ **Last updated:** [March 16, 2020, 1:44pm UTC](https://discuss.elastic.co/t/values-are-not-showing-correctly-when-used-aggs-sort/221807 "2020-03-16T13:44:18Z")
Hello, I have one index named master\_db, in that i have fetched one column from db named content\_type. I am using aggs to sort values of content \_type as below: GET /master\_db/\_search?size=0 { "aggs":{ "group\_by":{… --- ## [Watcher EmailAction throwing Exception](https://discuss.elastic.co/t/watcher-emailaction-throwing-exception/223698)
**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 1:42pm UTC](https://discuss.elastic.co/t/watcher-emailaction-throwing-exception/223698 "2020-03-16T13:42:39Z")
Hello Team, Version Used: 7.4 I am facing the following issue while working with Elasticsearch watcher Email Action . "condition": { "type": "compare", "status": "success", "met": true, "compar… --- ## [100% CPU accross all 8 nodes during query](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545)
**Author:** [@bradley.king](https://discuss.elastic.co/u/bradley.king)\ **Replies:** 4\ **Last updated:** [March 16, 2020, 1:40pm UTC](https://discuss.elastic.co/t/100-cpu-accross-all-8-nodes-during-query/223545 "2020-03-16T13:40:36Z")
HI everyone We've been trying to get the the bottom of this issue for a few months now with no luck, would really appropriate some support :slight\_smile: The issue When querying our Wazuh Alert indexes we see 100% CPU… --- ## [Percentile ranks return wrong value](https://discuss.elastic.co/t/percentile-ranks-return-wrong-value/223755)
**Author:** [@Yevhen\_Baidiuk](https://discuss.elastic.co/u/Yevhen_Baidiuk)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 12:44pm UTC](https://discuss.elastic.co/t/percentile-ranks-return-wrong-value/223755 "2020-03-16T12:44:39Z")
I read about "Percentiles Aggregation" and know already about "relative error". In my case, I have to calculate correctly. I have 45 values greater than 0.4 and 1 values smaller than 0.4 So correct return percentile … --- ## [Advice on Elasticsearch Architecture design](https://discuss.elastic.co/t/advice-on-elasticsearch-architecture-design/223408)
**Author:** [@Allan\_John](https://discuss.elastic.co/u/Allan_John)\ **Replies:** 3\ **Last updated:** [March 16, 2020, 12:09pm UTC](https://discuss.elastic.co/t/advice-on-elasticsearch-architecture-design/223408 "2020-03-16T12:09:46Z")
Hi all, I am planning to setup an Elastic Stack with different type of nodes. For start there might be less traffic, but it can increase a lot in few months as many applications will be pushing lot of data. My plan was… --- ## [Recommended supported resources and environment load max record](https://discuss.elastic.co/t/recommended-supported-resources-and-environment-load-max-record/223745)
**Author:** [@vin.ramesh](https://discuss.elastic.co/u/vin.ramesh)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 11:54am UTC](https://discuss.elastic.co/t/recommended-supported-resources-and-environment-load-max-record/223745 "2020-03-16T11:54:45Z")
For this implementation, default query size 10,000, max 3,000,000 what is the recommended supported resources and environment. --- ## [Words with - in elastic search](https://discuss.elastic.co/t/words-with-in-elastic-search/223722)
**Author:** [@Vaibhav\_Sharma](https://discuss.elastic.co/u/Vaibhav_Sharma)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/words-with-in-elastic-search/223722 "2020-03-16T10:02:04Z")
I have string like "DMZ-trust", when I search in elastic it shows result for DMZ and trust but not for complete word "DMZ-trust". Which property defines this behavior in elastic and how to change it. I am using this map… --- ## [Bulk indexing rejected threads](https://discuss.elastic.co/t/bulk-indexing-rejected-threads/223679)
**Author:** [@adrian\_luighi](https://discuss.elastic.co/u/adrian_luighi)\ **Replies:** 13\ **Last updated:** [March 16, 2020, 9:41am UTC](https://discuss.elastic.co/t/bulk-indexing-rejected-threads/223679 "2020-03-16T09:41:55Z")
Hello, I am pretty new to elasticsearch I made my project and everything works really well except bulk indexing. The problem is I am getting alot of rejected write threads. I looked up thread pool and I got this: node\_… --- ## [JVM, ERROR, \[o.e.c.r.a.DiskThresholdMonitor\] \[ESHOST\] low disk watermark \[85%\]](https://discuss.elastic.co/t/jvm-error-o-e-c-r-a-diskthresholdmonitor-eshost-low-disk-watermark-85/223700)
**Author:** [@Sheik](https://discuss.elastic.co/u/Sheik)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:59am UTC](https://discuss.elastic.co/t/jvm-error-o-e-c-r-a-diskthresholdmonitor-eshost-low-disk-watermark-85/223700 "2020-03-16T06:59:11Z")
Hi, I have been working with one of the PoC project, where the requirement is to collect the ERROR logs from multiple linux nodes to Windows machine where ElasticSearch and kibana are running. I could able to see the lo… --- ## [Provided Grok patterns do not match field value](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051)
**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\ **Replies:** 10\ **Last updated:** [March 16, 2020, 8:33am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051 "2020-03-16T08:33:49Z")
Hello, I have an issue for a few days I can resolve. I want to parse "Feb 7 00:23:34 ig1-edge-dc3-01\_re0 rpd\[1524\]: RPD\_BGP\_NEIGHBOR\_STATE\_CHANGED: BGP peer 158.58.176.35 (External AS 200271) changed state from EstabSy… --- ## [Getting “master not discovered exception” even running only one node](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699)
**Author:** [@Jane\_C](https://discuss.elastic.co/u/Jane_C)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 7:31am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699 "2020-03-16T07:31:09Z")
Hi there, I am using Elasticsearch 7.6.0 and I only have one node. But I still getting the exception, master\_not\_discovered\_exception when running curl -H "Content-Type: application/json" -XPUT 127.0.0.1:9200/movies… --- ## [How to enable SLM feature in elastic.co](https://discuss.elastic.co/t/how-to-enable-slm-feature-in-elastic-co/223696)
**Author:** [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:45am UTC](https://discuss.elastic.co/t/how-to-enable-slm-feature-in-elastic-co/223696 "2020-03-16T06:45:18Z")
I'm running an Elasticsearch cluster in elastic.co. The version is 7.6.0. While working with the SLM, I figured out that SLM is not enabled. I can check that by using the API GET \_xpack?categories=features&pretty The … --- ## [Elasticsearch ILM bug how to debug?](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [March 16, 2020, 6:19am UTC](https://discuss.elastic.co/t/elasticsearch-ilm-bug-how-to-debug/223693 "2020-03-16T06:19:22Z")
ILM policy is set: rollover daily / delete after 31days. Index is deleted after 7days (ignoring 31days setup) I tried to change the value 30,31 and no change. This ILM is used by 2 templates and 2 indexes. test\_xxx, a… --- ## [Getting](https://discuss.elastic.co/t/getting/223664)
**Author:** [@Suchismita\_Goswami](https://discuss.elastic.co/u/Suchismita_Goswami)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 5:40am UTC](https://discuss.elastic.co/t/getting/223664 "2020-03-16T05:40:56Z")
I am deploying Elasticsearch onto kubernetes cluster using Elastic’s Helm repository . After chaning the fullnameoveride field in values.yaml I am getting MasterNot Discovered error. However, when I kept fullnameoverri… --- ## [How to index customized windows application logs to elatsicsearch using fluentd](https://discuss.elastic.co/t/how-to-index-customized-windows-application-logs-to-elatsicsearch-using-fluentd/223667)
**Author:** [@muralikri32](https://discuss.elastic.co/u/muralikri32)\ **Replies:** 0\ **Last updated:** [March 15, 2020, 9:31pm UTC](https://discuss.elastic.co/t/how-to-index-customized-windows-application-logs-to-elatsicsearch-using-fluentd/223667 "2020-03-15T21:31:04Z")
Hi, I have configured Fluentd on windows server (WIN 2012) and trying to tail customized application logs (which is present in C:/opt/td-agent/application.log) to elastic search. Each time when i configure and start the… --- ## [Fatal error in thread exiting](https://discuss.elastic.co/t/fatal-error-in-thread-exiting/223614)
**Author:** [@kangning1](https://discuss.elastic.co/u/kangning1)\ **Replies:** 3\ **Last updated:** [March 15, 2020, 10:53am UTC](https://discuss.elastic.co/t/fatal-error-in-thread-exiting/223614 "2020-03-15T10:53:24Z")
hi: I received an error. When es imported the data, it reported an error and exited, and the cluster stuck. Elasticsearch runs on kubernetes, using the glusterfs store. Cluster information： sh-4.2$ curl 127.0.0.1:920… --- ## [High-Cardinality Aggregation Alternate Approaches (2 million buckets)](https://discuss.elastic.co/t/high-cardinality-aggregation-alternate-approaches-2-million-buckets/222814)
**Author:** [@khickey](https://discuss.elastic.co/u/khickey)\ **Replies:** 10\ **Last updated:** [March 15, 2020, 9:11am UTC](https://discuss.elastic.co/t/high-cardinality-aggregation-alternate-approaches-2-million-buckets/222814 "2020-03-15T09:11:49Z")
Requirement: calculate a sum aggregate on a high-cardinality field of 2M unique values, order the results by the sum, and return the top 10 (or pages of 10 each). We are moving some of our materialized-view based data s… --- ## [Order or Sort Serial\_diff Agg result](https://discuss.elastic.co/t/order-or-sort-serial-diff-agg-result/223647)
**Author:** [@ad1982](https://discuss.elastic.co/u/ad1982)\ **Replies:** 0\ **Last updated:** [March 15, 2020, 7:31am UTC](https://discuss.elastic.co/t/order-or-sort-serial-diff-agg-result/223647 "2020-03-15T07:31:15Z")
I am trying to sort the result of a serial\_diff agg. and struggling with that. Below is the code ET db/\_search { "size": 0, "query": { "bool": { "must": \[ { … --- ## [Aggregate return negative value for min timestamp](https://discuss.elastic.co/t/aggregate-return-negative-value-for-min-timestamp/223157)
**Author:** [@Ameed\_Ashour](https://discuss.elastic.co/u/Ameed_Ashour)\ **Replies:** 2\ **Last updated:** [March 15, 2020, 7:30am UTC](https://discuss.elastic.co/t/aggregate-return-negative-value-for-min-timestamp/223157 "2020-03-15T07:30:41Z")
Hi, I am working with ES Version: 6.2.1, I tried to get the minimum and maximum timestamp to use it for Kibana, POST/ :9200/{Index\_name}/\_search { "size": 0, "aggregations": { "minimum\_date": { "min": { "field":… --- ## [Most performant API client](https://discuss.elastic.co/t/most-performant-api-client/223441)
**Author:** [@byteandbit](https://discuss.elastic.co/u/byteandbit)\ **Replies:** 3\ **Last updated:** [March 15, 2020, 6:33am UTC](https://discuss.elastic.co/t/most-performant-api-client/223441 "2020-03-15T06:33:18Z")
Hello, Which API client is most performant to access Elasticsearch? Thanks --- ## [Elasticsearch + Analyzer + English dataset + French query](https://discuss.elastic.co/t/elasticsearch-analyzer-english-dataset-french-query/222432)
**Author:** [@Yassine\_Nifa](https://discuss.elastic.co/u/Yassine_Nifa)\ **Replies:** 5\ **Last updated:** [March 15, 2020, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-analyzer-english-dataset-french-query/222432 "2020-03-15T03:32:35Z")
Hey guys ! I created an attribute with "annotated\_text" to be able to recognize some entities "headline": {"type": "annotated\_text", "analyzer":"analyzer\_shingle"} Now I can for example look for "Turkey" and it return… --- ## [Some confusion about rebalance and allocation](https://discuss.elastic.co/t/some-confusion-about-rebalance-and-allocation/223622)
**Author:** [@KellyK313](https://discuss.elastic.co/u/KellyK313)\ **Replies:** 2\ **Last updated:** [March 15, 2020, 12:49am UTC](https://discuss.elastic.co/t/some-confusion-about-rebalance-and-allocation/223622 "2020-03-15T00:49:54Z")
I'm got confuse about cluster.routing.allocation.enable and cluster.routing.rebalance.enable (1)if I set cluster.routing.allocation.enable = none cluster.routing.rebalance.enable = all still no rebalance will happen? … --- ## [Boolean fields are not indexed after upgrade to 6.8.7 from 5.6.16](https://discuss.elastic.co/t/boolean-fields-are-not-indexed-after-upgrade-to-6-8-7-from-5-6-16/223534)
**Author:** [@santhoshpt](https://discuss.elastic.co/u/santhoshpt)\ **Replies:** 1\ **Last updated:** [March 14, 2020, 9:13pm UTC](https://discuss.elastic.co/t/boolean-fields-are-not-indexed-after-upgrade-to-6-8-7-from-5-6-16/223534 "2020-03-14T21:13:11Z")
I'm trying to upgrade the org.elasticsearch:elasticsearch to 6.8.7 from 5.6.16 as part of spring boot upgrade. When trying to create index with static mappings, I have noticed no information is stored for the boolean fi… --- ## [Elasticsearch filter document ids with same field values count](https://discuss.elastic.co/t/elasticsearch-filter-document-ids-with-same-field-values-count/223635)
**Author:** [@Iwave\_Nice](https://discuss.elastic.co/u/Iwave_Nice)\ **Replies:** 0\ **Last updated:** [March 14, 2020, 8:05pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-document-ids-with-same-field-values-count/223635 "2020-03-14T20:05:58Z")
I need to return ids of documents that have the same myField value repeated \[range\] times. i.e. I have clientName field and want to find ids of all documents where clientName = 'John' but only if this name is found in 2-… --- ## [\[ILM Policy\] Best compromise between size and max age](https://discuss.elastic.co/t/ilm-policy-best-compromise-between-size-and-max-age/223299)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 5\ **Last updated:** [March 14, 2020, 1:40pm UTC](https://discuss.elastic.co/t/ilm-policy-best-compromise-between-size-and-max-age/223299 "2020-03-14T13:40:54Z")
Hello Elasticians ! While testing ILM policy feature, I've just figured that the delete phase is relative to the rollover time, not the index creation time (source) Let's say I have the following ILM policy : { "im… --- ## [Urgent: Looking for advice on selecting proper Elasticsearch service type with OPTIMIZED Configuration](https://discuss.elastic.co/t/urgent-looking-for-advice-on-selecting-proper-elasticsearch-service-type-with-optimized-configuration/223492)
**Author:** [@ashik.rajbhandari](https://discuss.elastic.co/u/ashik.rajbhandari)\ **Replies:** 3\ **Last updated:** [March 14, 2020, 1:10pm UTC](https://discuss.elastic.co/t/urgent-looking-for-advice-on-selecting-proper-elasticsearch-service-type-with-optimized-configuration/223492 "2020-03-14T13:10:54Z")
We have been trying to move to Elasticsearch implementation from core Lucene and have stumbled into a couple of situations. Before asking questions relating to our complex situations, we would like to share detail inform… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=985) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=987)