# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1150

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1151

---

## [Visualization: Controls with map properties](https://discuss.elastic.co/t/visualization-controls-with-map-properties/254878)

<div class="topic-metadata">

**Author:** [@loefflefarn](https://discuss.elastic.co/u/loefflefarn)\
**Replies:** 6\
**Last updated:** [November 17, 2020, 7:53am UTC](https://discuss.elastic.co/t/visualization-controls-with-map-properties/254878 "2020-11-17T07:53:06Z")

</div>

Hello, I want to create option lists controls for a filtering visualization. My data model looks something similar like this: { "id": "id", "name": "name", "properties": \[ "key=value", …

---

## [Unable to see elasticsearch.log file](https://discuss.elastic.co/t/unable-to-see-elasticsearch-log-file/255632)

<div class="topic-metadata">

**Author:** [@praveencdcx](https://discuss.elastic.co/u/praveencdcx)\
**Replies:** 0\
**Last updated:** [November 17, 2020, 7:51am UTC](https://discuss.elastic.co/t/unable-to-see-elasticsearch-log-file/255632 "2020-11-17T07:51:50Z")

</div>

After elasticsearch configuration i have restarted the service and service is up, but when i tried to see elasticsearch log i found below. wondering how log file is missing. Can some one help me on this. sudo tail -30f /…

---

## [Change Text color on char bar Visualization using JSON](https://discuss.elastic.co/t/change-text-color-on-char-bar-visualization-using-json/255613)

<div class="topic-metadata">

**Author:** [@jose-sonicwebdev.com](https://discuss.elastic.co/u/jose-sonicwebdev.com)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 7:39am UTC](https://discuss.elastic.co/t/change-text-color-on-char-bar-visualization-using-json/255613 "2020-11-17T07:39:11Z")

</div>

Is there a way to change the text font color on a Bar chart under visualizations?

---

## [How to sort the data in Logstash?](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628)

<div class="topic-metadata">

**Author:** [@yummycake](https://discuss.elastic.co/u/yummycake)\
**Replies:** 4\
**Last updated:** [November 17, 2020, 7:37am UTC](https://discuss.elastic.co/t/how-to-sort-the-data-in-logstash/255628 "2020-11-17T07:37:39Z")

</div>

I have ingested the data from CSV into Elasticsearch, however, when I view them in 'Discover, Kibana' the ID did not ingest in order. The field 'ID' in the CSV doc starts from 1 For example, instead of: 1 2 3 4 It…

---

## [Logstash, if statement](https://discuss.elastic.co/t/logstash-if-statement/255629)

<div class="topic-metadata">

**Author:** [@Guhan\_S](https://discuss.elastic.co/u/Guhan_S)\
**Replies:** 2\
**Last updated:** [November 17, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-if-statement/255629 "2020-11-17T07:34:39Z")

</div>

Hi guys, we are using PINO logger.... as per their docs... trace: 10, debug: 20, info: 30, warn: 40, error: 50, fatal: 60 I am getting logs like ("level":30 ). {"level":30,"time":....,"pid":1,"hostname":"ip" My …

---

## [When opening kibana elasticsearch crash with following error](https://discuss.elastic.co/t/when-opening-kibana-elasticsearch-crash-with-following-error/255577)

<div class="topic-metadata">

**Author:** [@Ehsan\_sarshar](https://discuss.elastic.co/u/Ehsan_sarshar)\
**Replies:** 4\
**Last updated:** [November 17, 2020, 7:12am UTC](https://discuss.elastic.co/t/when-opening-kibana-elasticsearch-crash-with-following-error/255577 "2020-11-17T07:12:09Z")

</div>

failed to retrieve password hash for reserved user \[elastic\] org.elasticsearch.action.UnavailableShardsException: at least one primary shard for the index \[.security-7\] is unavailable I am using docker-compose to run t…

---

## [Y-axis label is not displying in kibana 7.9 version for timeline chat](https://discuss.elastic.co/t/y-axis-label-is-not-displying-in-kibana-7-9-version-for-timeline-chat/250938)

<div class="topic-metadata">

**Author:** [@naveenj](https://discuss.elastic.co/u/naveenj)\
**Replies:** 5\
**Last updated:** [November 17, 2020, 7:11am UTC](https://discuss.elastic.co/t/y-axis-label-is-not-displying-in-kibana-7-9-version-for-timeline-chat/250938 "2020-11-17T07:11:16Z")

</div>

Y-axis label is not displying in kibana 7.9 version for timeline chat, but the same is working in 7.5 version. The bellow is screenshot of 7.5 and 7.9 version Can you please check and let me know ASAP. Thanks

---

## [Interpretation of the values from the Observability\>Metrics page](https://discuss.elastic.co/t/interpretation-of-the-values-from-the-observability-metrics-page/255555)

<div class="topic-metadata">

**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 7:05am UTC](https://discuss.elastic.co/t/interpretation-of-the-values-from-the-observability-metrics-page/255555 "2020-11-17T07:05:15Z")

</div>

Hi, I use Metricbeat (v7.9.2) to send CPU and memory metrics of the pods to ES. When I navigate to the page Observability\>Metrics and select Docker Container, I see the container of my Pod with a CPU usage of 53.3% and …

---

## [RE: NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{DzxzK0iPRpWhbsQrG1XL-Q}{localhost}{127.0.0.1:9200}\]\]](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210)

<div class="topic-metadata">

**Author:** [@a\_m1](https://discuss.elastic.co/u/a_m1)\
**Replies:** 7\
**Last updated:** [November 17, 2020, 7:02am UTC](https://discuss.elastic.co/t/re-nonodeavailableexception-none-of-the-configured-nodes-are-available-transport-1-dzxzk0iprpwhbsqrg1xl-q-localhost-127-0-0-1-9200/254210 "2020-11-17T07:02:44Z")

</div>

NoNodeAvailableException\[None of the configured nodes are available: \[{#transport#-1}{uM03bFC3TFaMt15Oe0ZUpA}{172.17.1.63}{172.17.1.63:9300}\]\] I am using spring boot 2.3.4 rest API, elasticsearch 7.9.3, kibana 7.6.2. I…

---

## [Store dynamic JSON and make it searchable](https://discuss.elastic.co/t/store-dynamic-json-and-make-it-searchable/254044)

<div class="topic-metadata">

**Author:** [@GPT](https://discuss.elastic.co/u/GPT)\
**Replies:** 2\
**Last updated:** [November 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/store-dynamic-json-and-make-it-searchable/254044 "2020-11-17T05:41:22Z")

</div>

Hi All I have a JSON structure but the fields could be changing. I went through this article to convert JSON into a string and make it searchable. Is there a way to set the mapping as JSON and still searchable without c…

---

## [How to put password in elasticsearch keystore without using bin\\elasticsearch-keystore add](https://discuss.elastic.co/t/how-to-put-password-in-elasticsearch-keystore-without-using-bin-elasticsearch-keystore-add/255008)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 5:10am UTC](https://discuss.elastic.co/t/how-to-put-password-in-elasticsearch-keystore-without-using-bin-elasticsearch-keystore-add/255008 "2020-11-17T05:10:47Z")

</div>

Currently my private key, public cert and signed cert are done using openssl How do I put password in elasticsearch keystore without using bin\\elasticsearch-keystore add? It appears that the bin\\elasticsearch-keystore …

---

## [To Lookup the data which is coming from two different Kafka topics using Logstash](https://discuss.elastic.co/t/to-lookup-the-data-which-is-coming-from-two-different-kafka-topics-using-logstash/255618)

<div class="topic-metadata">

**Author:** [@Sangeetha\_Sivaji](https://discuss.elastic.co/u/Sangeetha_Sivaji)\
**Replies:** 0\
**Last updated:** [November 17, 2020, 5:07am UTC](https://discuss.elastic.co/t/to-lookup-the-data-which-is-coming-from-two-different-kafka-topics-using-logstash/255618 "2020-11-17T05:07:25Z")

</div>

Hello, I have a requirement that "Logstash need to read the data from two different Kafka topics, lookup the read data using filter plugin and finally send it to Elasticsearch". Two Kafka topics are presented, one cons…

---

## [Specify master nodes or non-master nodes in client configs?](https://discuss.elastic.co/t/specify-master-nodes-or-non-master-nodes-in-client-configs/255614)

<div class="topic-metadata">

**Author:** [@ted.fed](https://discuss.elastic.co/u/ted.fed)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 5:05am UTC](https://discuss.elastic.co/t/specify-master-nodes-or-non-master-nodes-in-client-configs/255614 "2020-11-17T05:05:50Z")

</div>

I want to know what is the best practice for client-side config. Should we specify only the master nodes dedicated for master only role? Or should we specify only the non-master nodes (like data nodes)? Or both need t…

---

## [Parent/child relationship with child having certain records](https://discuss.elastic.co/t/parent-child-relationship-with-child-having-certain-records/255615)

<div class="topic-metadata">

**Author:** [@ChrisNicPaps](https://discuss.elastic.co/u/ChrisNicPaps)\
**Replies:** 0\
**Last updated:** [November 17, 2020, 4:01am UTC](https://discuss.elastic.co/t/parent-child-relationship-with-child-having-certain-records/255615 "2020-11-17T04:01:54Z")

</div>

I have a parent/child relationship where students have subjects that they pass. So Student have many subject. I would like to write a query that returns all student that have "math" and "english" and 3 other subjects.

---

## [Snapshot Repositories](https://discuss.elastic.co/t/snapshot-repositories/255610)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 2:20am UTC](https://discuss.elastic.co/t/snapshot-repositories/255610 "2020-11-17T02:20:09Z")

</div>

Hi All, Wondering if there was a best-practices/recommendations with Snapshot Repositories. The new feature of searchable snapshots is very intriguing for my use case, and I am currently exploring it. I will be purchas…

---

## [How to encrypt Elasticsearch document source?](https://discuss.elastic.co/t/how-to-encrypt-elasticsearch-document-source/255488)

<div class="topic-metadata">

**Author:** [@Yao\_Pan](https://discuss.elastic.co/u/Yao_Pan)\
**Replies:** 3\
**Last updated:** [November 17, 2020, 12:21am UTC](https://discuss.elastic.co/t/how-to-encrypt-elasticsearch-document-source/255488 "2020-11-17T00:21:09Z")

</div>

I need to encrypt Elasticsearch document source content for security. The final effect to be achieved is as follows: input: { "title":"you know, for search", "viewcount": 20 } In es: { …

---

## [Mapping geo\_point to dynamically named indexes](https://discuss.elastic.co/t/mapping-geo-point-to-dynamically-named-indexes/255588)

<div class="topic-metadata">

**Author:** [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)\
**Replies:** 1\
**Last updated:** [November 17, 2020, 12:04am UTC](https://discuss.elastic.co/t/mapping-geo-point-to-dynamically-named-indexes/255588 "2020-11-17T00:04:57Z")

</div>

Hi, I installed ES 7.9.3 and somehow geoip.location doesn't get mapped to a geo\_point. I did the mapping, and it worked, but when I try to do the same mapping for a dynamically created index (with custom dates, for exam…

---

## [How to reindex data from a Async search?](https://discuss.elastic.co/t/how-to-reindex-data-from-a-async-search/255592)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 1\
**Last updated:** [November 16, 2020, 10:30pm UTC](https://discuss.elastic.co/t/how-to-reindex-data-from-a-async-search/255592 "2020-11-16T22:30:57Z")

</div>

we have a large dataset which times out in normal watcher/search and were planning to use "async" search. But after posting such an async search, how to then put the output into another index? We need the summary inform…

---

## [Parsing syslog param1=value1 param2="value2"](https://discuss.elastic.co/t/parsing-syslog-param1-value1-param2-value2/255565)

<div class="topic-metadata">

**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\
**Replies:** 3\
**Last updated:** [November 16, 2020, 9:52pm UTC](https://discuss.elastic.co/t/parsing-syslog-param1-value1-param2-value2/255565 "2020-11-16T21:52:00Z")

</div>

Trying to learn GROK by using the GROK debugger tool in Kibana. Data is stuctured like this: param1=value1 param2="value 2" param4=param4 param1=value1 param2="value 2" param3=param3 param4=param4 Questions are: W…

---

## [Endpoint 7.9 "Degraded and dashboards"](https://discuss.elastic.co/t/endpoint-7-9-degraded-and-dashboards/247452)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 28\
**Last updated:** [November 16, 2020, 8:50pm UTC](https://discuss.elastic.co/t/endpoint-7-9-degraded-and-dashboards/247452 "2020-11-16T20:50:26Z")

</div>

So first things first I know it's beta. But I've come into a few odd ball issues I haven't been able to stumble my way around. I have the Endpoint installed on a around 50 dev nodes now and I'm seeing a couple common ev…

---

## [Logs nicely parsed but not showing in dashboards for nginx module in kubernetes](https://discuss.elastic.co/t/logs-nicely-parsed-but-not-showing-in-dashboards-for-nginx-module-in-kubernetes/255443)

<div class="topic-metadata">

**Author:** [@Palino1611](https://discuss.elastic.co/u/Palino1611)\
**Replies:** 2\
**Last updated:** [November 16, 2020, 8:48pm UTC](https://discuss.elastic.co/t/logs-nicely-parsed-but-not-showing-in-dashboards-for-nginx-module-in-kubernetes/255443 "2020-11-16T20:48:42Z")

</div>

Hello, I am running my nginx container in kubernetes and using nginx module I am able to parse logs and show them nicely in kibana discover. I also see ingest pipelines for nginx in kibana. My setup is: Filebeat daemon…

---

## [EQL: How to get a simple query working from DEV tools?](https://discuss.elastic.co/t/eql-how-to-get-a-simple-query-working-from-dev-tools/255444)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 1\
**Last updated:** [November 16, 2020, 8:19pm UTC](https://discuss.elastic.co/t/eql-how-to-get-a-simple-query-working-from-dev-tools/255444 "2020-11-16T20:19:12Z")

</div>

hi, I'm trying to simulate a basic EQL query via the dev tools. Some data POST \_bulk { "index" : { "\_index" : "win\_test", "\_id" : "1" } } { "@timestamp": "2020-11-12T02:00:00Z", "host\_name" : "myhost1" , "event": {"cod…

---

## [Logstash error after updating to 7.9.1](https://discuss.elastic.co/t/logstash-error-after-updating-to-7-9-1/255366)

<div class="topic-metadata">

**Author:** [@noobman2logstash](https://discuss.elastic.co/u/noobman2logstash)\
**Replies:** 8\
**Last updated:** [November 16, 2020, 6:46pm UTC](https://discuss.elastic.co/t/logstash-error-after-updating-to-7-9-1/255366 "2020-11-16T18:46:07Z")

</div>

\[2020-11-13T16:36:21,302\]\[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:default, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create, acti…

---

## [Checking ReIndex Status - Seems wrong, why?](https://discuss.elastic.co/t/checking-reindex-status-seems-wrong-why/255582)

<div class="topic-metadata">

**Author:** [@21908](https://discuss.elastic.co/u/21908)\
**Replies:** 1\
**Last updated:** [November 16, 2020, 6:34pm UTC](https://discuss.elastic.co/t/checking-reindex-status-seems-wrong-why/255582 "2020-11-16T18:34:23Z")

</div>

I'm going off of Kibana document page at: https://www.elastic.co/guide/en/kibana/current/check-reindex-status.html I ran the "reindex status" command and am seeing this result in the browser: This result appears wro…

---

## [Scripted fields in vega visualization - Getting Bad request as error](https://discuss.elastic.co/t/scripted-fields-in-vega-visualization-getting-bad-request-as-error/254395)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 6\
**Last updated:** [November 16, 2020, 6:29pm UTC](https://discuss.elastic.co/t/scripted-fields-in-vega-visualization-getting-bad-request-as-error/254395 "2020-11-16T18:29:47Z")

</div>

{ $schema: "https://vega.github.io/schema/vega-lite/v2.json" data: { url: { %context%: true index: index\_ssd\_2 body: { size: 10000, \_source: \["mediatype","pred\_comp\_sem","Gender","PhotoOfP…

---

## [In Scripted fields no option to select lucene expression language - kibana version 7.9](https://discuss.elastic.co/t/in-scripted-fields-no-option-to-select-lucene-expression-language-kibana-version-7-9/253528)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 4\
**Last updated:** [November 16, 2020, 5:41pm UTC](https://discuss.elastic.co/t/in-scripted-fields-no-option-to-select-lucene-expression-language-kibana-version-7-9/253528 "2020-11-16T17:41:38Z")

</div>

---

## [Bettering response time by using lesser number of bigger-sized shards](https://discuss.elastic.co/t/bettering-response-time-by-using-lesser-number-of-bigger-sized-shards/254475)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 10\
**Last updated:** [November 16, 2020, 4:34pm UTC](https://discuss.elastic.co/t/bettering-response-time-by-using-lesser-number-of-bigger-sized-shards/254475 "2020-11-16T16:34:23Z")

</div>

I have an ES 6.8.6 cluster containing about 1200 day-wise indices. Today indexing happens only on today's day-wise index. There are no updates. This cluster contains about 45 TB data including preserving historical data …

---

## [Display date without time in Elasticsearch](https://discuss.elastic.co/t/display-date-without-time-in-elasticsearch/255266)

<div class="topic-metadata">

**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\
**Replies:** 5\
**Last updated:** [November 16, 2020, 4:33pm UTC](https://discuss.elastic.co/t/display-date-without-time-in-elasticsearch/255266 "2020-11-16T16:33:46Z")

</div>

Hi, I have the following input in a "Date" field: Date=2020.11.12 Currently, it's displaying as this in Kibana: Date Nov 12, 2020 @ 00:00:00.000 I would like to display this as is in Kibana, i.e., Date: 2020.11.12. …

---

## [Split string in scripted fields, using \_ as a delimiter](https://discuss.elastic.co/t/split-string-in-scripted-fields-using-as-a-delimiter/253803)

<div class="topic-metadata">

**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\
**Replies:** 6\
**Last updated:** [November 16, 2020, 4:25pm UTC](https://discuss.elastic.co/t/split-string-in-scripted-fields-using-as-a-delimiter/253803 "2020-11-16T16:25:03Z")

</div>

I have a string field "myfield.keyword", where each entry has the following format: AAA\_BBBB\_CC DDD\_EEE\_F I am trying to create a scripted field that outputs the substring before the first \_, a scripted field that out…

---

## [Active\_primary\_shards \> 1 when you have more than 1 data node](https://discuss.elastic.co/t/active-primary-shards-1-when-you-have-more-than-1-data-node/255545)

<div class="topic-metadata">

**Author:** [@21908](https://discuss.elastic.co/u/21908)\
**Replies:** 3\
**Last updated:** [November 16, 2020, 4:22pm UTC](https://discuss.elastic.co/t/active-primary-shards-1-when-you-have-more-than-1-data-node/255545 "2020-11-16T16:22:13Z")

</div>

I have a 3 node Elasticsearch cluster. All nodes are data bearing nodes. If active\_primary\_shards is set to 1 my data would not be distributed among the 3 nodes, is that a correct understanding? My single shard would …

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1149)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1151)
