# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1557 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1558 --- ## [Many Elasticsearch threads in WAITING parking state](https://discuss.elastic.co/t/many-elasticsearch-threads-in-waiting-parking-state/264154)
**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 5:23pm UTC](https://discuss.elastic.co/t/many-elasticsearch-threads-in-waiting-parking-state/264154 "2021-02-12T17:23:48Z")
Hi, We are running a ES cluster on 6.8 and we are still using TCP client. I know it's deprecated and move to REST client but we have not got around to it yet. In addition, we have a service which uses Elastic4s library… --- ## [Azure Marketplace - Elasticsearch managed service failing](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-managed-service-failing/264143)
**Author:** [@Campbell](https://discuss.elastic.co/u/Campbell)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 5:03pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-managed-service-failing/264143 "2021-02-12T17:03:32Z")
All, I'm trying to subscribe to the Elasticsearch Managed Service from the Azure Marketplace and I'm hitting some errors. It seems that the options available during subscription are limited (plan, resource group etc.),… --- ## [How to convert two inserted values in kibana in a single Geopoint](https://discuss.elastic.co/t/how-to-convert-two-inserted-values-in-kibana-in-a-single-geopoint/264153)
**Author:** [@Mheni](https://discuss.elastic.co/u/Mheni)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 4:30pm UTC](https://discuss.elastic.co/t/how-to-convert-two-inserted-values-in-kibana-in-a-single-geopoint/264153 "2021-02-12T16:30:33Z")
I Insert 2 values(Lat and Long) in Kibana and I want to convert them in a single Geopoint . The Aim is to present them using a heatMap. --- ## [ElasticsearchDeprecationWarning: Need some clarification to make corrections](https://discuss.elastic.co/t/elasticsearchdeprecationwarning-need-some-clarification-to-make-corrections/264136)
**Author:** [@varshap](https://discuss.elastic.co/u/varshap)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 4:11pm UTC](https://discuss.elastic.co/t/elasticsearchdeprecationwarning-need-some-clarification-to-make-corrections/264136 "2021-02-12T16:11:33Z")
Hi Guys, I am new to ES, I recently integrated ES in my Django project by following. https://django-elasticsearch-dsl.readthedocs.io/en/latest/quickstart.html Versions used: django-elasticsearch-dsl==7.1.4 django-el… --- ## [Kibana 7.4.0 all indices vanish at the end of each day](https://discuss.elastic.co/t/kibana-7-4-0-all-indices-vanish-at-the-end-of-each-day/264148)
**Author:** [@Josh\_Creek](https://discuss.elastic.co/u/Josh_Creek)\ **Replies:** 7\ **Last updated:** [February 12, 2021, 4:08pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-all-indices-vanish-at-the-end-of-each-day/264148 "2021-02-12T16:08:14Z")
I have been using ELK in Docker for several years now, with zero issues. I am currently running a couple of entirely separate Dockerized ELK stacks, on entirely different servers running different environments, and am ex… --- ## [Logstash JDBC file permission errors, cannot send data to elastic](https://discuss.elastic.co/t/logstash-jdbc-file-permission-errors-cannot-send-data-to-elastic/263810)
**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\ **Replies:** 5\ **Last updated:** [February 12, 2021, 3:43pm UTC](https://discuss.elastic.co/t/logstash-jdbc-file-permission-errors-cannot-send-data-to-elastic/263810 "2021-02-12T15:43:28Z")
Hi, I keep getting errors when running JDBC, it seems to complain about being unable to read to files on disc but I have checked the permissions and there is write access. The problem seems to become worse when having a… --- ## [XML load with Logstash into Elasticsearch](https://discuss.elastic.co/t/xml-load-with-logstash-into-elasticsearch/263767)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 4\ **Last updated:** [February 12, 2021, 3:28pm UTC](https://discuss.elastic.co/t/xml-load-with-logstash-into-elasticsearch/263767 "2021-02-12T15:28:06Z")
Hi , I have tried to create a load process with Logstash from an XML file to Elasticsearch. i use ELK 7.9.0 on windows. this is my config file : input { file { path =\> "C:/Talend/workspace/data/giata/geography/geog… --- ## [Persistent Queueing Performance](https://discuss.elastic.co/t/persistent-queueing-performance/264149)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 3:15pm UTC](https://discuss.elastic.co/t/persistent-queueing-performance/264149 "2021-02-12T15:15:39Z")
Hi, As I understand it, persistent queue operations are single threaded. And that tallies with what I've seen during performance tests. Can I ask, are there plans to make persistent queues multi-threaded? If so, how far… --- ## [Plugin configuration](https://discuss.elastic.co/t/plugin-configuration/264079)
**Author:** [@rwxr\_xr\_x](https://discuss.elastic.co/u/rwxr_xr_x)\ **Replies:** 2\ **Last updated:** [February 12, 2021, 3:14pm UTC](https://discuss.elastic.co/t/plugin-configuration/264079 "2021-02-12T15:14:05Z")
Hello, I'm converting a plugin built for ES 2.1.1 to ES 7.10. I'm running into a strange issue. I need to pass: plugin-name.enable: true If I add it to elasticsearch.yml file, the configuration is available in my plu… --- ## [Use Tool tip with Grid Aggregations on Map](https://discuss.elastic.co/t/use-tool-tip-with-grid-aggregations-on-map/264142)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 3:03pm UTC](https://discuss.elastic.co/t/use-tool-tip-with-grid-aggregations-on-map/264142 "2021-02-12T15:03:52Z")
Hello Everyone, I'm using maps in Kibana, precisely the Grid Aggregations because I'll like to see my hits with circle markers whose size depends of the count. But I'd also like to see some informations on the tooltip o… --- ## [Elasticsearch throwing some overhead warning in logs](https://discuss.elastic.co/t/elasticsearch-throwing-some-overhead-warning-in-logs/264137)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-throwing-some-overhead-warning-in-logs/264137 "2021-02-12T15:01:57Z")
HI Team, we are getting below response in elasticsearch log , anyone can help me on this why im getting this kind of error on it, \[2021-02-12T07:29:17,371\]\[WARN \]\[o.e.m.j.JvmGcMonitorService\] \[datanode1\] \[gc\]\[242917\] … --- ## [Searchable snapshots in ECK - Enterprise license only?](https://discuss.elastic.co/t/searchable-snapshots-in-eck-enterprise-license-only/264138)
**Author:** [@sc75651](https://discuss.elastic.co/u/sc75651)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 2:12pm UTC](https://discuss.elastic.co/t/searchable-snapshots-in-eck-enterprise-license-only/264138 "2021-02-12T14:12:11Z")
Is Searchable snapshots in ECK - Enterprise license only? --- ## [How to use date\_histogram to aggregate documents that span multiple period based on two date fields](https://discuss.elastic.co/t/how-to-use-date-histogram-to-aggregate-documents-that-span-multiple-period-based-on-two-date-fields/264135)
**Author:** [@Lekishor](https://discuss.elastic.co/u/Lekishor)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 1:42pm UTC](https://discuss.elastic.co/t/how-to-use-date-histogram-to-aggregate-documents-that-span-multiple-period-based-on-two-date-fields/264135 "2021-02-12T13:42:39Z")
Hi, So I have documents defined based on the following mapping: documents: "ID": { "type": "integer" }, "Start": { "type": "date", "format": "strict\_date\_optional\_t… --- ## [Unable to run logstash 7.10 on custom java path](https://discuss.elastic.co/t/unable-to-run-logstash-7-10-on-custom-java-path/264130)
**Author:** [@Suddhasil\_Sarkar](https://discuss.elastic.co/u/Suddhasil_Sarkar)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 12:59pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-7-10-on-custom-java-path/264130 "2021-02-12T12:59:46Z")
Hi ELK Gurus, Need help- I was trying to run my logstash with customized JVM which is not happening. I set JAVA\_HOME pointing to my custom path "/app/platform/java/" but logstash is running with default java 11 - "/usr/… --- ## ["\_shard\_stores" returns empty](https://discuss.elastic.co/t/shard-stores-returns-empty/263966)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 12:25pm UTC](https://discuss.elastic.co/t/shard-stores-returns-empty/263966 "2021-02-12T12:25:36Z")
Hey, when I try to GET /\_shard\_stores i always get an empty response. I tried it with the elastic user or every other user. My cluster is Green and i have some 1000 shards allocated. I wanted to know where a shard live… --- ## [After two nodes fail, Master cannot be assigned to the third one](https://discuss.elastic.co/t/after-two-nodes-fail-master-cannot-be-assigned-to-the-third-one/264030)
**Author:** [@Mateusz\_Koper](https://discuss.elastic.co/u/Mateusz_Koper)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 12:20pm UTC](https://discuss.elastic.co/t/after-two-nodes-fail-master-cannot-be-assigned-to-the-third-one/264030 "2021-02-12T12:20:16Z")
Hi, In our organization, we've set up 3 nodes, two of them are storing the data, and the last one is a kind of 'Tiebreaker'. When one of the node fails, Master is easily switched to the other machine, and everything se… --- ## [Use 2 variable in a math expression](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 4\ **Last updated:** [February 12, 2021, 12:17pm UTC](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041 "2021-02-12T12:17:09Z")
I am running 7.9.1 and am trying to perform math with 2 variables like below. Is this possible? filters | timefilter field="@timestamp" from="now-1d" to="now" | var\_set name="completed" value={escount index="index\_1" q… --- ## [Elasticsearch script breaking change query Accessing missing document value](https://discuss.elastic.co/t/elasticsearch-script-breaking-change-query-accessing-missing-document-value/264096)
**Author:** [@sardar\_nale](https://discuss.elastic.co/u/sardar_nale)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 11:43am UTC](https://discuss.elastic.co/t/elasticsearch-script-breaking-change-query-accessing-missing-document-value/264096 "2021-02-12T11:43:34Z")
Hi all, We are using elastic version 7.10.2 and it is migrated from 6.8.6. I want to compare two fields from a same document using Scripting .Below query was working in elastic version 6.8.6 now after upgrade to 7.10 i… --- ## [Optimizing segment merging](https://discuss.elastic.co/t/optimizing-segment-merging/264111)
**Author:** [@buncieboy](https://discuss.elastic.co/u/buncieboy)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 11:03am UTC](https://discuss.elastic.co/t/optimizing-segment-merging/264111 "2021-02-12T11:03:38Z")
When we index our data from our database (using the HibernateSearch-ElasticSearch implementation) we found we were getting a large amount of segments (20-30). On our current data we found that force-merging the data (2 i… --- ## [Split an array of arrays](https://discuss.elastic.co/t/split-an-array-of-arrays/263724)
**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\ **Replies:** 4\ **Last updated:** [February 12, 2021, 10:52am UTC](https://discuss.elastic.co/t/split-an-array-of-arrays/263724 "2021-02-12T10:52:00Z")
Hi all, I'm currently working on parsing a really nasty xml stream: events come in single file form, can get up to 5000 lines and, most important, includes arrays of arrays which crucially hold the data I need to parse … --- ## [Cluster status red and unassigned shards](https://discuss.elastic.co/t/cluster-status-red-and-unassigned-shards/264081)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 2\ **Last updated:** [February 12, 2021, 10:49am UTC](https://discuss.elastic.co/t/cluster-status-red-and-unassigned-shards/264081 "2021-02-12T10:49:59Z")
I updated the elastic cluster to 7.10.1. Then elasticsearch service was restarted. Then cluster status became "Red". There are two unassigned shards (same index primary and replica shards). I want to know how to make cl… --- ## [Cannot be changed from type \[float\] to \[long\] issue appears. But, we have dynamic data and it's hard to put mappings on them](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long-issue-appears-but-we-have-dynamic-data-and-its-hard-to-put-mappings-on-them/264105)
**Author:** [@Kruthika\_C\_S](https://discuss.elastic.co/u/Kruthika_C_S)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 10:35am UTC](https://discuss.elastic.co/t/cannot-be-changed-from-type-float-to-long-issue-appears-but-we-have-dynamic-data-and-its-hard-to-put-mappings-on-them/264105 "2021-02-12T10:35:10Z")
I have a lot of unstructured data in millions. Some of them have {...data, value: \} and some have {...data, value: \} in the data. All I'm trying to say is, the data type of value can differ. In addition t… --- ## [Multiple filebeats to a server ELK in docker](https://discuss.elastic.co/t/multiple-filebeats-to-a-server-elk-in-docker/263836)
**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\ **Replies:** 13\ **Last updated:** [February 12, 2021, 10:17am UTC](https://discuss.elastic.co/t/multiple-filebeats-to-a-server-elk-in-docker/263836 "2021-02-12T10:17:26Z")
I'm new to elk and i want to and I want to connect my elk stack with filebeat in docker, which I already have created in docker and it is creating the records for me, because I can see them in kibana. Now what I want is… --- ## [Logstash input via website user file upload](https://discuss.elastic.co/t/logstash-input-via-website-user-file-upload/263994)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 2\ **Last updated:** [February 12, 2021, 10:16am UTC](https://discuss.elastic.co/t/logstash-input-via-website-user-file-upload/263994 "2021-02-12T10:16:54Z")
Hi, Im very new to the whole ELK stack and Im still learning. For my current project Im required to process some MongoDB log files uploaded by user through our website and I have trouble figuring out how I should configu… --- ## [Need help in understanding Elasticsearch configuration with TLS/SSL](https://discuss.elastic.co/t/need-help-in-understanding-elasticsearch-configuration-with-tls-ssl/263998)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 5\ **Last updated:** [February 12, 2021, 9:58am UTC](https://discuss.elastic.co/t/need-help-in-understanding-elasticsearch-configuration-with-tls-ssl/263998 "2021-02-12T09:58:51Z")
Hi Team, We have a EFK cluster (7.4.x) which was setup more than a year ago with x-pack enabled. At that I followed official document and created self-signed certificates using elastisearch-certutil and that was workin… --- ## [Vega-Lite bar chart doesn't show anything for filters aggregation](https://discuss.elastic.co/t/vega-lite-bar-chart-doesnt-show-anything-for-filters-aggregation/263882)
**Author:** [@grra](https://discuss.elastic.co/u/grra)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 9:38am UTC](https://discuss.elastic.co/t/vega-lite-bar-chart-doesnt-show-anything-for-filters-aggregation/263882 "2021-02-12T09:38:13Z")
Hello, In my Vega-Lit spec I do a query which returns the following response: "aggregations" : { "my-groups" : { "buckets" : { "group-1" : { "doc\_count" : 16958 }, "group-2… --- ## [Kibana bar chart doesn't work for filters aggregation](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633)
**Author:** [@elster](https://discuss.elastic.co/u/elster)\ **Replies:** 10\ **Last updated:** [February 12, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633 "2021-02-12T09:31:00Z")
Dear experts, I created several Vega (lite) barcharts using this code: { $schema: https://vega.github.io/schema/vega-lite/v2.json title: Login Method Distribution data: { url: { } format: {property: "aggr… --- ## [Parsing error on ilm](https://discuss.elastic.co/t/parsing-error-on-ilm/264099)
**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 9:06am UTC](https://discuss.elastic.co/t/parsing-error-on-ilm/264099 "2021-02-12T09:06:16Z")
hey had this iLM working now for months. all of a sudden getting this error - mapper\_parsing\_exception: Failed to parse mapping \[\_doc\]: unknown parameter \[ignore\_above\] on mapper \[mem\] of type \[long\] anyone know wh… --- ## [Get elasticsearch hostname in watcher](https://discuss.elastic.co/t/get-elasticsearch-hostname-in-watcher/264093)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 8:28am UTC](https://discuss.elastic.co/t/get-elasticsearch-hostname-in-watcher/264093 "2021-02-12T08:28:03Z")
I need to get the hostname of the elasticsearch node which executes a watch. As far as it seems it is not available as a ctx variable. As well it seems not possible to get it directly by painless. Does anybody know how t… --- ## [Auditbeat 7.11 on Ubuntu doesn't read /var/log/btmp](https://discuss.elastic.co/t/auditbeat-7-11-on-ubuntu-doesnt-read-var-log-btmp/264092)
**Author:** [@Supp0rt](https://discuss.elastic.co/u/Supp0rt)\ **Replies:** 0\ **Last updated:** [February 12, 2021, 8:26am UTC](https://discuss.elastic.co/t/auditbeat-7-11-on-ubuntu-doesnt-read-var-log-btmp/264092 "2021-02-12T08:26:50Z")
Hi, I installed auditbeat 7.11.2 on Ubuntu 16.04 and Centos 7 to read login from file /var/log/wtmp and /var/log/btmp . On Centos 7 all registers are read correctly. On Ubuntu, only login and logout are collected. No… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1556) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1558)