I have an ES cluster with 4 nodes: number_of_replicas: 1 search01 – master: false, data: false search02 – master: true, data: true search03 – master: false, data: true search04 – master: false, data: true I had to restart search03, and when it came back, it rejoined the cluster no problem, but left 7 unassigned shards … Read more
I know one can delete all documents from a certain type via deleteByQuery. Example: curl -XDELETE ‘http://localhost:9200/twitter/tweet/_query’ -d ‘{ “query” : { “term” : { “user” : “kimchy” } } }’ But i have NO term and simply want to delete all documents from that type, no matter what term. What is best practice to … Read more
I’m trying to list all buckets on an aggregation, but it seems to be showing only the first 10. My search: curl -XPOST “http://localhost:9200/imoveis/_search?pretty=1” -d’ { “size”: 0, “aggregations”: { “bairro_count”: { “terms”: { “field”: “bairro.raw” } } } }’ Returns: { “took” : 2, “timed_out” : false, “_shards” : { “total” : 5, “successful” … Read more
I can’t see any description of when I should use a query or a filter or some combination of the two. What is the difference between them? Can anyone please explain? 8 Answers 8
What is the difference between MUST and SHOULD bool query in ES? If I ONLY want results that contain my terms should I then use must ? I have a query that should only contain certain values, and also no results that has a lower date/timestamp than todays time/date – NOW Also Can i use … Read more
I am currently trying to migrate a solr-based application to elasticsearch. I have this lucene query (( name:(+foo +bar) OR info:(+foo +bar) )) AND state:(1) AND (has_image:(0) OR has_image:(1)^100) As far as I understand this is a combination of MUST clauses combined with boolean OR: “Get all documents containing (foo AND bar in name) OR … Read more
When trying to post documents to Elasticsearch as normal I’m getting this error: cluster_block_exception [FORBIDDEN/12/index read-only / allow delete (api)]; I also see this message on the Elasticsearch logs: flood stage disk watermark [95%] exceeded … all indices on this node will marked read-only 5 Answers 5
I am trying to understand what shard and replica is in Elasticsearch, but I didn’t manage to understand it. If I download Elasticsearch and run the script, then from what I know I have started a cluster with a single node. Now this node (my PC) have 5 shards (?) and some replicas (?). What … Read more
I’m new to ElasticSearch. I’m trying to figure out how to remove data from ElasticSearch. I have deleted my indexes. However, that doesn’t seem to actually remove the data itself. The other stuff I’ve seen points to the Delete by Query feature. However, I’m not even sure what to query on. I know my indexes. … Read more
I’m using elasticsearch to index my documents. Is it possible to instruct it to only return particular fields instead of the entire json document it has stored? 13 s 13 Yep, Use a better option source filter. If you’re searching with JSON it’ll look something like this: { “_source”: [“user”, “message”, …], “query”: …, “size”: … Read more
