# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=989 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 990 --- ## [Match all nested array terms](https://discuss.elastic.co/t/match-all-nested-array-terms/223336)
**Author:** [@janis.sakars](https://discuss.elastic.co/u/janis.sakars)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 1:19pm UTC](https://discuss.elastic.co/t/match-all-nested-array-terms/223336 "2020-03-12T13:19:07Z")
Hi! I have the need to index and search by Question/Answers logic e.g. There is a Question with multiple answers =\> You can choose many of them e.g. "What languages do You speak?" would allow answers like "English", "Ge… --- ## [Searching sentence/words with different order/position](https://discuss.elastic.co/t/searching-sentence-words-with-different-order-position/223324)
**Author:** [@Kevin\_Juliano](https://discuss.elastic.co/u/Kevin_Juliano)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 1:32pm UTC](https://discuss.elastic.co/t/searching-sentence-words-with-different-order-position/223324 "2020-03-12T13:32:12Z")
Hi! Is there a way to search a sentence or words and the result will be same number of words but they are in different order, I know my question is confusing so I will just give an example: if I search for a phrase flo… --- ## [Terms aggregation on an inner object and retrieving bucket metadata](https://discuss.elastic.co/t/terms-aggregation-on-an-inner-object-and-retrieving-bucket-metadata/223337)
**Author:** [@pierre\_n](https://discuss.elastic.co/u/pierre_n)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 1:20pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-an-inner-object-and-retrieving-bucket-metadata/223337 "2020-03-12T13:20:28Z")
We index the following products: { "id": "1", "name": "the-name", "categories": \[ { "id" : 10, "name" : "cat-1" }, { "id" : 20, "name" … --- ## [Number of master nodes for a multi-node cluster](https://discuss.elastic.co/t/number-of-master-nodes-for-a-multi-node-cluster/223310)
**Author:** [@jkhere](https://discuss.elastic.co/u/jkhere)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 12:45pm UTC](https://discuss.elastic.co/t/number-of-master-nodes-for-a-multi-node-cluster/223310 "2020-03-12T12:45:02Z")
Hi, I am planning to set up an elasticsearch cluster of around 160 nodes. As I have read in the documentation and some other forum posts, I need to set up dedicated master nodes and data nodes. The cluster will be Inde… --- ## [Multipolygon support for elastic search](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042)
**Author:** [@tamil5ag](https://discuss.elastic.co/u/tamil5ag)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 12:31pm UTC](https://discuss.elastic.co/t/multipolygon-support-for-elastic-search/223042 "2020-03-12T12:31:00Z")
Hi, Elastic search support multipolygon query? If yes, how to form a query to get coordinates under different polygon(An array of separate polygons - multipolygon). And also which type need to define to create schema i… --- ## [Should CircuitBreakingException cause the node to become failed?](https://discuss.elastic.co/t/should-circuitbreakingexception-cause-the-node-to-become-failed/220817)
**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\ **Replies:** 13\ **Last updated:** [March 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/should-circuitbreakingexception-cause-the-node-to-become-failed/220817 "2020-03-12T12:05:33Z")
Hello I'm running a 7.5.2 cluster. Today, while snapshots were being made (although I'm not sure it was snapshotting that triggered the issue), one of the nodes logged CircuitBreakingException and became failed for seve… --- ## [ELK 7.3](https://discuss.elastic.co/t/elk-7-3/223115)
**Author:** [@mounikasony](https://discuss.elastic.co/u/mounikasony)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 11:23am UTC](https://discuss.elastic.co/t/elk-7-3/223115 "2020-03-12T11:23:59Z")
how to enable kibana audit logs? I have made configuration changes xpack.security.audit.enabled= true in elasticsearch.yml . how do the data write into this file elasticsearch\_audit.json with audited events like access… --- ## [Bool Query giving inappropriate results](https://discuss.elastic.co/t/bool-query-giving-inappropriate-results/223277)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 11:22am UTC](https://discuss.elastic.co/t/bool-query-giving-inappropriate-results/223277 "2020-03-12T11:22:03Z")
This is the structure of my index "chatbot" : { "chatbot" : { "aliases" : { }, "mappings" : { "properties" : { "answer" : { "type" : "text" }, "creationDate" : { … --- ## [FSCrawler path to remote dir](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080)
**Author:** [@LaaKii](https://discuss.elastic.co/u/LaaKii)\ **Replies:** 31\ **Last updated:** [March 12, 2020, 10:51am UTC](https://discuss.elastic.co/t/fscrawler-path-to-remote-dir/223080 "2020-03-12T10:51:18Z")
I'm using FSCrawler by @dadoonet and im trying to index files on a remote server. The ssh connection is established, but it can't find the path. I tried all variants I could think of in the URL String. My config looks … --- ## [How to create a new field in a doc using scripted fields and ingest pipeline](https://discuss.elastic.co/t/how-to-create-a-new-field-in-a-doc-using-scripted-fields-and-ingest-pipeline/222989)
**Author:** [@fenster25](https://discuss.elastic.co/u/fenster25)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 10:54am UTC](https://discuss.elastic.co/t/how-to-create-a-new-field-in-a-doc-using-scripted-fields-and-ingest-pipeline/222989 "2020-03-12T10:54:29Z")
So I have two fields in my docs { emails: \["", "", ""\] name: "", } And I want to have a new field once the docs are indexed called uid which will just contain the concatenated strings of all the emails and the… --- ## [ODBC connector](https://discuss.elastic.co/t/odbc-connector/223208)
**Author:** [@Oscar\_Benitez](https://discuss.elastic.co/u/Oscar_Benitez)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 10:50am UTC](https://discuss.elastic.co/t/odbc-connector/223208 "2020-03-12T10:50:56Z")
Is there any odbc driver that is free to connect elasticsearch with another BI visualization tool? --- ## [Elasticsearch restart causes error unable to find script \[q\_checkitem\] in cluster state](https://discuss.elastic.co/t/elasticsearch-restart-causes-error-unable-to-find-script-q-checkitem-in-cluster-state/223000)
**Author:** [@sa1212](https://discuss.elastic.co/u/sa1212)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-restart-causes-error-unable-to-find-script-q-checkitem-in-cluster-state/223000 "2020-03-12T10:49:27Z")
Hi, After Elasticsearch cluster containers restarted we get resource not found exception when a search is attempted. { "error" : { "root\_cause" : \[ { "type" : "resource\_not\_found\_exception", … --- ## [Creating a Watcher Rule](https://discuss.elastic.co/t/creating-a-watcher-rule/223007)
**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 10:38am UTC](https://discuss.elastic.co/t/creating-a-watcher-rule/223007 "2020-03-12T10:38:31Z")
I am new to watcher rules and need some guidance How do i write a watcherrule to Look at an index at a specific field to see if a value = B If value = B { "trigger": { "schedule": { "interval": "1m" }… --- ## [How to create smtp server?](https://discuss.elastic.co/t/how-to-create-smtp-server/223296)
**Author:** [@Yuvaraj](https://discuss.elastic.co/u/Yuvaraj)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/how-to-create-smtp-server/223296 "2020-03-12T10:32:48Z")
Anyone is there?? --- ## [Need help with jq aggregation filter](https://discuss.elastic.co/t/need-help-with-jq-aggregation-filter/223240)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/need-help-with-jq-aggregation-filter/223240 "2020-03-12T10:32:10Z")
Hi Folks, I understand this might be off-topic but need help on using jq with my bash script for extracting IP addresses. Somehow my filter is not working hence needed your help. I am extracting src\_ip for last 24 hours… --- ## [Metrics aggregation gives unreasonable result on long numeric datatype](https://discuss.elastic.co/t/metrics-aggregation-gives-unreasonable-result-on-long-numeric-datatype/220218)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 10:30am UTC](https://discuss.elastic.co/t/metrics-aggregation-gives-unreasonable-result-on-long-numeric-datatype/220218 "2020-03-12T10:30:42Z")
ES version: 7.3.2 My daily index is using dynamic template to map incoming data automatically. Somehow the field "value" which might map to numeric float datatype sometimes. Then in other time, it was mapped to long dat… --- ## [Unable to get audit logs on authentication\_failed](https://discuss.elastic.co/t/unable-to-get-audit-logs-on-authentication-failed/220417)
**Author:** [@ChrisR](https://discuss.elastic.co/u/ChrisR)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 10:29am UTC](https://discuss.elastic.co/t/unable-to-get-audit-logs-on-authentication-failed/220417 "2020-03-12T10:29:03Z")
I enabled xpack security auditing in elasticsearch.yml on all nodes and restarted the elasticsearch cluster (version 6.8), but I am not seeing any audit log or access log when an http request fails authentication. xpack… --- ## [Nested search with multiple must query not working](https://discuss.elastic.co/t/nested-search-with-multiple-must-query-not-working/219990)
**Author:** [@dreamfish](https://discuss.elastic.co/u/dreamfish)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 10:19am UTC](https://discuss.elastic.co/t/nested-search-with-multiple-must-query-not-working/219990 "2020-03-12T10:19:44Z")
I have the following mapping within my elastic Index: "equipment": { "type": "nested", "properties": { "equipment\_category": { "type": "text", … --- ## [Alerting based on particular keyword fields](https://discuss.elastic.co/t/alerting-based-on-particular-keyword-fields/221250)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 10:15am UTC](https://discuss.elastic.co/t/alerting-based-on-particular-keyword-fields/221250 "2020-03-12T10:15:23Z")
Hello, I have a question about Watcher functionality. My index contains a field named type and subtype. We have around 300 different types, each having around 10 subtypes. Each event that comes to elastic contains both … --- ## [ElasticSearch and Kibana installed successfully, but cannot be accessed by web browser](https://discuss.elastic.co/t/elasticsearch-and-kibana-installed-successfully-but-cannot-be-accessed-by-web-browser/220065)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-installed-successfully-but-cannot-be-accessed-by-web-browser/220065 "2020-03-12T10:13:15Z")
Below is the setting from kibana.yml: server.port: 5601 server.host: namenode2 elasticsearch.url: "http://namenode2:9200" Below is the setting from elasticsearch.yml: cluster.name: es-prod node.name: master-1 path… --- ## [Slack alert not triggering to particular channel](https://discuss.elastic.co/t/slack-alert-not-triggering-to-particular-channel/220970)
**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\ **Replies:** 10\ **Last updated:** [March 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/slack-alert-not-triggering-to-particular-channel/220970 "2020-03-12T10:10:57Z")
Team, we have slack integrated and we are using it for sending alerts to multiple slack channels. currently we created few new channels and slack alerts are not being received in those channels. same watcher is sending a… --- ## [Need help diagnosing slow indexing speed](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123)
**Author:** [@xenoid](https://discuss.elastic.co/u/xenoid)\ **Replies:** 12\ **Last updated:** [March 12, 2020, 9:22am UTC](https://discuss.elastic.co/t/need-help-diagnosing-slow-indexing-speed/223123 "2020-03-12T09:22:14Z")
Hi guys! I need some help diagnosing my cluster performance. Indexing is very slow and the whole cluster as well as Kibana is pretty unresponsive. Here is my cluster: We index about 1,5TB or 1.5 bn events every day… --- ## [Script update : NOOP when script does not modify document?](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724)
**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 9:59am UTC](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724 "2020-03-12T09:59:14Z")
I need to update a large number of documents. Technically this update (should) generate a lot of noops. The script checks a condition on the \_source, and only modify the \_source under certain conditions. I cannot check … --- ## [Master node writes to only one data node use case](https://discuss.elastic.co/t/master-node-writes-to-only-one-data-node-use-case/223061)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [March 11, 2020, 9:03am UTC](https://discuss.elastic.co/t/master-node-writes-to-only-one-data-node-use-case/223061 "2020-03-11T09:03:28Z")
Hi I'm having three nodes one acts as master and two as data nodes. I need to ensure high availability. I want master to write data only to one node, say node A and other node will be only read-only node, node B. But… --- ## [Is it possible to configure 2 Elastic Search Instances and Kibana instance in single machine](https://discuss.elastic.co/t/is-it-possible-to-configure-2-elastic-search-instances-and-kibana-instance-in-single-machine/223266)
**Author:** [@Sandesh\_Reddy](https://discuss.elastic.co/u/Sandesh_Reddy)\ **Replies:** 3\ **Last updated:** [March 12, 2020, 9:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-configure-2-elastic-search-instances-and-kibana-instance-in-single-machine/223266 "2020-03-12T09:27:50Z")
Is it possible to create 2 elastic search instances and one Kibana instance in a single server with below server configuration? • 56 GB RAM • 64 Bit • 8 vCPUs • Windows Server 2016 Data Center Please refer some docs… --- ## [Synonyms filter doesn't work in all modes when indexing](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071)
**Author:** [@yohanesss](https://discuss.elastic.co/u/yohanesss)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 9:21am UTC](https://discuss.elastic.co/t/synonyms-filter-doesnt-work-in-all-modes-when-indexing/223071 "2020-03-12T09:21:52Z")
Hi, I have a problem when I tried to index data with a synonyms that read from file, that is an mapper\_exception which giving me error like this: { "error" : { "root\_cause" : \[ { "type" : "mapper\_exception", "reaso… --- ## [Watcher trigger time has wrong working](https://discuss.elastic.co/t/watcher-trigger-time-has-wrong-working/221805)
**Author:** [@maddog](https://discuss.elastic.co/u/maddog)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 9:02am UTC](https://discuss.elastic.co/t/watcher-trigger-time-has-wrong-working/221805 "2020-03-12T09:02:54Z")
Dear All My Watcher can be work & alerted. but watcher trigger with daily has wrong working. how to check what wrong of state? Example Config Watcher Schedule trigger "trigger": { "schedule": { "da… --- ## [How to create multiple nodes in cluster without running separate command for each node?](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-cluster-without-running-separate-command-for-each-node/223248)
**Author:** [@cravinder489](https://discuss.elastic.co/u/cravinder489)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 8:18am UTC](https://discuss.elastic.co/t/how-to-create-multiple-nodes-in-cluster-without-running-separate-command-for-each-node/223248 "2020-03-12T08:18:44Z")
I want to add 5 nodes (on the same machine) to my elasticsearch cluster. I have done that by running separate commands for all five nodes as: elasticsearch -Epath.data=data1 -Epath.logs=log1 elasticsearch -Epath.data=… --- ## [What happens when I increase replica count?](https://discuss.elastic.co/t/what-happens-when-i-increase-replica-count/222854)
**Author:** [@darkknight](https://discuss.elastic.co/u/darkknight)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 7:51am UTC](https://discuss.elastic.co/t/what-happens-when-i-increase-replica-count/222854 "2020-03-12T07:51:54Z")
Hello, We have a 18 node elastic search cluster. We have a few indices but lets talk about one specific index. It has 60 shards with a replica of 1. There are about 11 million documents and the index size is about 850G… --- ## [Problem adding nodes to an elasticsearch cluster using SSL, TLS and HTTPS](https://discuss.elastic.co/t/problem-adding-nodes-to-an-elasticsearch-cluster-using-ssl-tls-and-https/223270)
**Author:** [@dferez](https://discuss.elastic.co/u/dferez)\ **Replies:** 0\ **Last updated:** [March 12, 2020, 7:31am UTC](https://discuss.elastic.co/t/problem-adding-nodes-to-an-elasticsearch-cluster-using-ssl-tls-and-https/223270 "2020-03-12T07:31:45Z")
Hi. I have a cluster under development for testing, and now I have implemented SSL, TLS and HTTPS following this link: "https://www.elastic.co/es/blog/configuring-ssl-tls-and-https-to -secure-elasticsearch-kibana-beats-… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=988) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=990)