# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1694 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1695 --- ## [Hot CPUs on data nodes: action.ActionListener$1.onResponse is called recurisvely](https://discuss.elastic.co/t/hot-cpus-on-data-nodes-action-actionlistener-1-onresponse-is-called-recurisvely/255625)
**Author:** [@larryzhu](https://discuss.elastic.co/u/larryzhu)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 8:03am UTC](https://discuss.elastic.co/t/hot-cpus-on-data-nodes-action-actionlistener-1-onresponse-is-called-recurisvely/255625 "2020-11-17T08:03:50Z")
we are seeing high CPUs on data nodes and the hot thread stacks suggest action.ActionListener$1.onResponse is called recursively. we are using "elastic" user and it should have access to all the indices. Is there any wa… --- ## [Visualization: Controls with map properties](https://discuss.elastic.co/t/visualization-controls-with-map-properties/254878)
**Author:** [@loefflefarn](https://discuss.elastic.co/u/loefflefarn)\ **Replies:** 6\ **Last updated:** [November 17, 2020, 7:53am UTC](https://discuss.elastic.co/t/visualization-controls-with-map-properties/254878 "2020-11-17T07:53:06Z")
Hello, I want to create option lists controls for a filtering visualization. My data model looks something similar like this: { "id": "id", "name": "name", "properties": \[ "key=value", … --- ## [Unable to see elasticsearch.log file](https://discuss.elastic.co/t/unable-to-see-elasticsearch-log-file/255632)
**Author:** [@praveencdcx](https://discuss.elastic.co/u/praveencdcx)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 7:51am UTC](https://discuss.elastic.co/t/unable-to-see-elasticsearch-log-file/255632 "2020-11-17T07:51:50Z")
After elasticsearch configuration i have restarted the service and service is up, but when i tried to see elasticsearch log i found below. wondering how log file is missing. Can some one help me on this. sudo tail -30f /… --- ## [Change Text color on char bar Visualization using JSON](https://discuss.elastic.co/t/change-text-color-on-char-bar-visualization-using-json/255613)
**Author:** [@jose-sonicwebdev.com](https://discuss.elastic.co/u/jose-sonicwebdev.com)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 7:39am UTC](https://discuss.elastic.co/t/change-text-color-on-char-bar-visualization-using-json/255613 "2020-11-17T07:39:11Z")
Is there a way to change the text font color on a Bar chart under visualizations? --- ## [How to sort the data in Logstash?](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628)
**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\ **Replies:** 4\ **Last updated:** [November 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628 "2020-11-17T07:37:39Z")
I have ingested the data from CSV into Elasticsearch, however, when I view them in 'Discover, Kibana' the ID did not ingest in order. The field 'ID' in the CSV doc starts from 1 For example, instead of: 1 2 3 4 It… --- ## [Logstash, if statement](https://discuss.elastic.co/t/logstash-if-statement/255629)
**Author:** [@Guhan\_S](https://discuss.elastic.co/u/Guhan_S)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-if-statement/255629 "2020-11-17T07:34:39Z")
Hi guys, we are using PINO logger.... as per their docs... trace: 10, debug: 20, info: 30, warn: 40, error: 50, fatal: 60 I am getting logs like ("level":30 ). {"level":30,"time":....,"pid":1,"hostname":"ip" My … --- ## [Azure OpenID Login doesn't work](https://discuss.elastic.co/t/azure-openid-login-doesnt-work/255593)
**Author:** [@thetell75](https://discuss.elastic.co/u/thetell75)\ **Replies:** 6\ **Last updated:** [November 17, 2020, 7:14am UTC](https://discuss.elastic.co/t/azure-openid-login-doesnt-work/255593 "2020-11-17T07:14:29Z")
Hi everyone..... Unfortunately my azure openid configuration seems not to work. I've verified the openid Authentication with OpenID Connect Playground and everything seems to be ok. Also if I set only Realm check in R… --- ## [When opening kibana elasticsearch crash with following error](https://discuss.elastic.co/t/when-opening-kibana-elasticsearch-crash-with-following-error/255577)
**Author:** [@Ehsan\_sarshar](https://discuss.elastic.co/u/Ehsan_sarshar)\ **Replies:** 4\ **Last updated:** [November 17, 2020, 7:12am UTC](https://discuss.elastic.co/t/when-opening-kibana-elasticsearch-crash-with-following-error/255577 "2020-11-17T07:12:09Z")
failed to retrieve password hash for reserved user \[elastic\] org.elasticsearch.action.UnavailableShardsException: at least one primary shard for the index \[.security-7\] is unavailable I am using docker-compose to run t… --- ## [Y-axis label is not displying in kibana 7.9 version for timeline chat](https://discuss.elastic.co/t/y-axis-label-is-not-displying-in-kibana-7-9-version-for-timeline-chat/250938)
**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\ **Replies:** 5\ **Last updated:** [November 17, 2020, 7:11am UTC](https://discuss.elastic.co/t/y-axis-label-is-not-displying-in-kibana-7-9-version-for-timeline-chat/250938 "2020-11-17T07:11:16Z")
Y-axis label is not displying in kibana 7.9 version for timeline chat, but the same is working in 7.5 version. The bellow is screenshot of 7.5 and 7.9 version Can you please check and let me know ASAP. Thanks --- ## [RE: NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{DzxzK0iPRpWhbsQrG1XL-Q}{localhost}{127.0.0.1:9200}\]\]](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210)
**Author:** [@a\_m1](https://discuss.elastic.co/u/a_m1)\ **Replies:** 7\ **Last updated:** [November 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210 "2020-11-17T07:02:44Z")
NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{uM03bFC3TFaMt15Oe0ZUpA}{172.17.1.63}{172.17.1.63:9300}\]\] I am using spring boot 2.3.4 rest API, elasticsearch 7.9.3, kibana 7.6.2. I… --- ## [Store dynamic JSON and make it searchable](https://discuss.elastic.co/t/store-dynamic-json-and-make-it-searchable/254044)
**Author:** [@GPT](https://discuss.elastic.co/u/GPT)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/store-dynamic-json-and-make-it-searchable/254044 "2020-11-17T05:41:22Z")
Hi All I have a JSON structure but the fields could be changing. I went through this article to convert JSON into a string and make it searchable. Is there a way to set the mapping as JSON and still searchable without c… --- ## [Monitoring/debugging queries per index](https://discuss.elastic.co/t/monitoring-debugging-queries-per-index/255609)
**Author:** [@jbury](https://discuss.elastic.co/u/jbury)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 5:29am UTC](https://discuss.elastic.co/t/monitoring-debugging-queries-per-index/255609 "2020-11-17T05:29:33Z")
I'd like to try to get some insight into the kinds of queries folks are running through kibana, as well as figure out what kind of impacts those queries might be having on the underlying elasticsearch clusters. A simple… --- ## [Map not filtering based on time](https://discuss.elastic.co/t/map-not-filtering-based-on-time/255503)
**Author:** [@Saurabh\_Anand](https://discuss.elastic.co/u/Saurabh_Anand)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 5:25am UTC](https://discuss.elastic.co/t/map-not-filtering-based-on-time/255503 "2020-11-17T05:25:13Z")
I created a dashboard in which I inserted a Map in it. To restrict user from seeing data I saved Map with a filter such that Time is between now to 3 months before. But when I add this Map in my dashboard the filter is n… --- ## [How to put password in elasticsearch keystore without using bin\\elasticsearch-keystore add](https://discuss.elastic.co/t/how-to-put-password-in-elasticsearch-keystore-without-using-bin-elasticsearch-keystore-add/255008)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 5:10am UTC](https://discuss.elastic.co/t/how-to-put-password-in-elasticsearch-keystore-without-using-bin-elasticsearch-keystore-add/255008 "2020-11-17T05:10:47Z")
Currently my private key, public cert and signed cert are done using openssl How do I put password in elasticsearch keystore without using bin\\elasticsearch-keystore add? It appears that the bin\\elasticsearch-keystore … --- ## [To Lookup the data which is coming from two different Kafka topics using Logstash](https://discuss.elastic.co/t/to-lookup-the-data-which-is-coming-from-two-different-kafka-topics-using-logstash/255618)
**Author:** [@Sangeetha\_Sivaji](https://discuss.elastic.co/u/Sangeetha_Sivaji)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 5:07am UTC](https://discuss.elastic.co/t/to-lookup-the-data-which-is-coming-from-two-different-kafka-topics-using-logstash/255618 "2020-11-17T05:07:25Z")
Hello, I have a requirement that "Logstash need to read the data from two different Kafka topics, lookup the read data using filter plugin and finally send it to Elasticsearch". Two Kafka topics are presented, one cons… --- ## [Specify master nodes or non-master nodes in client configs?](https://discuss.elastic.co/t/specify-master-nodes-or-non-master-nodes-in-client-configs/255614)
**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 5:05am UTC](https://discuss.elastic.co/t/specify-master-nodes-or-non-master-nodes-in-client-configs/255614 "2020-11-17T05:05:50Z")
I want to know what is the best practice for client-side config. Should we specify only the master nodes dedicated for master only role? Or should we specify only the non-master nodes (like data nodes)? Or both need t… --- ## [Parent/child relationship with child having certain records](https://discuss.elastic.co/t/parent-child-relationship-with-child-having-certain-records/255615)
**Author:** [@ChrisNicPaps](https://discuss.elastic.co/u/ChrisNicPaps)\ **Replies:** 0\ **Last updated:** [November 17, 2020, 4:01am UTC](https://discuss.elastic.co/t/parent-child-relationship-with-child-having-certain-records/255615 "2020-11-17T04:01:54Z")
I have a parent/child relationship where students have subjects that they pass. So Student have many subject. I would like to write a query that returns all student that have "math" and "english" and 3 other subjects. --- ## [Snapshot Repositories](https://discuss.elastic.co/t/snapshot-repositories/255610)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 2:20am UTC](https://discuss.elastic.co/t/snapshot-repositories/255610 "2020-11-17T02:20:09Z")
Hi All, Wondering if there was a best-practices/recommendations with Snapshot Repositories. The new feature of searchable snapshots is very intriguing for my use case, and I am currently exploring it. I will be purchas… --- ## [How to encrypt Elasticsearch document source?](https://discuss.elastic.co/t/how-to-encrypt-elasticsearch-document-source/255488)
**Author:** [@Yao\_Pan](https://discuss.elastic.co/u/Yao_Pan)\ **Replies:** 3\ **Last updated:** [November 17, 2020, 12:21am UTC](https://discuss.elastic.co/t/how-to-encrypt-elasticsearch-document-source/255488 "2020-11-17T00:21:09Z")
I need to encrypt Elasticsearch document source content for security. The final effect to be achieved is as follows: input: { "title":"you know, for search", "viewcount": 20 } In es: { … --- ## [Mapping geo\_point to dynamically named indexes](https://discuss.elastic.co/t/mapping-geo-point-to-dynamically-named-indexes/255588)
**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 12:04am UTC](https://discuss.elastic.co/t/mapping-geo-point-to-dynamically-named-indexes/255588 "2020-11-17T00:04:57Z")
Hi, I installed ES 7.9.3 and somehow geoip.location doesn't get mapped to a geo\_point. I did the mapping, and it worked, but when I try to do the same mapping for a dynamically created index (with custom dates, for exam… --- ## [Rx packet errors metricbeat stat doesn't match netstat output](https://discuss.elastic.co/t/rx-packet-errors-metricbeat-stat-doesnt-match-netstat-output/255583)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 0\ **Last updated:** [November 16, 2020, 6:00pm UTC](https://discuss.elastic.co/t/rx-packet-errors-metricbeat-stat-doesnt-match-netstat-output/255583 "2020-11-16T18:00:19Z")
I am using the following query: The stat I am trying to monitor is: kubernetes.pod.network.rx.errors. If I log onto one of the pods which has metricbeat running and my application and do netstat -s -u (-u for udp pa… --- ## [Ilm.json file](https://discuss.elastic.co/t/ilm-json-file/254974)
**Author:** [@Armen\_Khachikyan](https://discuss.elastic.co/u/Armen_Khachikyan)\ **Replies:** 2\ **Last updated:** [November 16, 2020, 11:32pm UTC](https://discuss.elastic.co/t/ilm-json-file/254974 "2020-11-16T23:32:00Z")
Please help me. is there anyway to create an JSON file, put there our ILM policy, and force elasticsearch to read that file(or add the path of location ILM policies in elasticsearch.yml)? --- ## [How to reindex data from a Async search?](https://discuss.elastic.co/t/how-to-reindex-data-from-a-async-search/255592)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [November 16, 2020, 10:30pm UTC](https://discuss.elastic.co/t/how-to-reindex-data-from-a-async-search/255592 "2020-11-16T22:30:57Z")
we have a large dataset which times out in normal watcher/search and were planning to use "async" search. But after posting such an async search, how to then put the output into another index? We need the summary inform… --- ## [Adding a new node to the cluster - shows offline](https://discuss.elastic.co/t/adding-a-new-node-to-the-cluster-shows-offline/255467)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 9\ **Last updated:** [November 16, 2020, 10:06pm UTC](https://discuss.elastic.co/t/adding-a-new-node-to-the-cluster-shows-offline/255467 "2020-11-16T22:06:50Z")
Hey Added a new node to the cluster. But it is not getting added?! Any ideas? Says it has 5 nodes, but node 5 is offline? Thanks! --- ## [Parsing syslog param1=value1 param2="value2"](https://discuss.elastic.co/t/parsing-syslog-param1-value1-param2-value2/255565)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 3\ **Last updated:** [November 16, 2020, 9:52pm UTC](https://discuss.elastic.co/t/parsing-syslog-param1-value1-param2-value2/255565 "2020-11-16T21:52:00Z")
Trying to learn GROK by using the GROK debugger tool in Kibana. Data is stuctured like this: param1=value1 param2="value 2" param4=param4 param1=value1 param2="value 2" param3=param3 param4=param4 Questions are: W… --- ## [Logs nicely parsed but not showing in dashboards for nginx module in kubernetes](https://discuss.elastic.co/t/logs-nicely-parsed-but-not-showing-in-dashboards-for-nginx-module-in-kubernetes/255443)
**Author:** [@Palino1611](https://discuss.elastic.co/u/Palino1611)\ **Replies:** 2\ **Last updated:** [November 16, 2020, 8:48pm UTC](https://discuss.elastic.co/t/logs-nicely-parsed-but-not-showing-in-dashboards-for-nginx-module-in-kubernetes/255443 "2020-11-16T20:48:42Z")
Hello, I am running my nginx container in kubernetes and using nginx module I am able to parse logs and show them nicely in kibana discover. I also see ingest pipelines for nginx in kibana. My setup is: Filebeat daemon… --- ## [EQL: How to get a simple query working from DEV tools?](https://discuss.elastic.co/t/eql-how-to-get-a-simple-query-working-from-dev-tools/255444)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [November 16, 2020, 8:19pm UTC](https://discuss.elastic.co/t/eql-how-to-get-a-simple-query-working-from-dev-tools/255444 "2020-11-16T20:19:12Z")
hi, I'm trying to simulate a basic EQL query via the dev tools. Some data POST \_bulk { "index" : { "\_index" : "win\_test", "\_id" : "1" } } { "@timestamp": "2020-11-12T02:00:00Z", "host\_name" : "myhost1" , "event": {"cod… --- ## [Metricbeat gives me certificate issue](https://discuss.elastic.co/t/metricbeat-gives-me-certificate-issue/255590)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 0\ **Last updated:** [November 16, 2020, 8:15pm UTC](https://discuss.elastic.co/t/metricbeat-gives-me-certificate-issue/255590 "2020-11-16T20:15:39Z")
Hello Team, I have been trying to configure the metricbeat over SSL and i keep getting the following error metricbeat\_1 | Exiting: error initializing publisher: 2 errors: open $CERTS\_DIR/elk/elk.crt: no such file or d… --- ## [Attempting to enable TLS](https://discuss.elastic.co/t/attempting-to-enable-tls/255453)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 9\ **Last updated:** [November 16, 2020, 7:55pm UTC](https://discuss.elastic.co/t/attempting-to-enable-tls/255453 "2020-11-16T19:55:15Z")
Elasticsearch 6.8.12 I have an existing cluster which was set up before x-pack was free. I now want to setup the security "properly". I have used Letsencrypt to install certificates on each of the cluster members and … --- ## [New plugin architecture: How to build?](https://discuss.elastic.co/t/new-plugin-architecture-how-to-build/253036)
**Author:** [@Dasko](https://discuss.elastic.co/u/Dasko)\ **Replies:** 10\ **Last updated:** [November 16, 2020, 7:42pm UTC](https://discuss.elastic.co/t/new-plugin-architecture-how-to-build/253036 "2020-11-16T19:42:41Z")
Hello, We are currently switching to Elasticsearch/Kibana 7.9.1 and creating new plugins, following the new architecture. We were already using our own plugins before, and were building them via the build command of th… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1693) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1695)