# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1090

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1091

---

## [Visualizations by Host include the Domain as a host](https://discuss.elastic.co/t/visualizations-by-host-include-the-domain-as-a-host/37809)

<div class="topic-metadata">

**Author:** [@jruybal](https://discuss.elastic.co/u/jruybal)\
**Replies:** 1\
**Last updated:** [December 23, 2015, 3:31am UTC](https://discuss.elastic.co/t/visualizations-by-host-include-the-domain-as-a-host/37809 "2015-12-23T03:31:34Z")

</div>

Haven't used Kibana in a while, but I've caught on to 4 pretty quickly. The thing I cannot figure out now is this problem with visualization. Whenever I try to stack line charts by host (or split pie charts by host) I g…

---

## [Checking if a field exists or not](https://discuss.elastic.co/t/checking-if-a-field-exists-or-not/37792)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 1\
**Last updated:** [December 22, 2015, 8:46pm UTC](https://discuss.elastic.co/t/checking-if-a-field-exists-or-not/37792 "2015-12-22T20:46:42Z")

</div>

So I have a field, dst\_geoip.country\_code2, that I use to find the country code. Entries that actually have a country code have this field, entries that do not do not have this field. In the Discover tab, how do I a ba…

---

## [Syslog not shown in kibana](https://discuss.elastic.co/t/syslog-not-shown-in-kibana/37757)

<div class="topic-metadata">

**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\
**Replies:** 1\
**Last updated:** [December 22, 2015, 3:24pm UTC](https://discuss.elastic.co/t/syslog-not-shown-in-kibana/37757 "2015-12-22T15:24:46Z")

</div>

Hello I got my ELK to work, and i can websruf to the localhost, but i cant send syslog messages to the host. all i get is the message no results found. IM running it on a Debian Linux, and this is a fresh install that …

---

## [Kibana not showning data from ES](https://discuss.elastic.co/t/kibana-not-showning-data-from-es/37182)

<div class="topic-metadata">

**Author:** [@Yorko](https://discuss.elastic.co/u/Yorko)\
**Replies:** 7\
**Last updated:** [December 21, 2015, 10:01pm UTC](https://discuss.elastic.co/t/kibana-not-showning-data-from-es/37182 "2015-12-21T22:01:43Z")

</div>

Hi, I've used Fscrawler to index some files from the file system to ES and hoped to hook up ES to Kibana to get a visual representation but after defining an index pattern for Kibana it doesn't display anything under t…

---

## [Is Export for grid data?](https://discuss.elastic.co/t/is-export-for-grid-data/37664)

<div class="topic-metadata">

**Author:** [@Santhosh\_Varala](https://discuss.elastic.co/u/Santhosh_Varala)\
**Replies:** 1\
**Last updated:** [December 21, 2015, 1:42pm UTC](https://discuss.elastic.co/t/is-export-for-grid-data/37664 "2015-12-21T13:42:55Z")

</div>

All, When can we expect support for the "Export in CSV format" for Grid Data shown in the discover Tab is available? Thanks & Regards, Santhosh V

---

## [Dashboard Chart Sizes](https://discuss.elastic.co/t/dashboard-chart-sizes/37600)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 4\
**Last updated:** [December 21, 2015, 1:16am UTC](https://discuss.elastic.co/t/dashboard-chart-sizes/37600 "2015-12-21T01:16:40Z")

</div>

Well I've started my painful upgrade from Kibana 3 to apparently Kibana 5 as I couldn't find a version of Kibana 4.4 for download, which includes the color palette fix github link. That being said, here's an image of my…

---

## [Using groups in Histogram](https://discuss.elastic.co/t/using-groups-in-histogram/37267)

<div class="topic-metadata">

**Author:** [@chinmoyd](https://discuss.elastic.co/u/chinmoyd)\
**Replies:** 3\
**Last updated:** [December 20, 2015, 5:25pm UTC](https://discuss.elastic.co/t/using-groups-in-histogram/37267 "2015-12-20T17:25:51Z")

</div>

I have the following fields in my Kibana Index pattern for a financial transaction application: Transaction Id, Transaction Type, Response Code, Datetime I want to display a histogram, where the X-axis will be the date…

---

## [Export Schema for Kibana 4/5?](https://discuss.elastic.co/t/export-schema-for-kibana-4-5/37602)

<div class="topic-metadata">

**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\
**Replies:** 3\
**Last updated:** [December 19, 2015, 5:51am UTC](https://discuss.elastic.co/t/export-schema-for-kibana-4-5/37602 "2015-12-19T05:51:50Z")

</div>

So as I'm mucking with this..my plan was to get a solid Kibana 5 setup...the whole works with searches, visualizations, and ultimately dashboard, then export and import from development to production. I am not finding a…

---

## [Very inconsistent "No results found" Kibana 4.3.0](https://discuss.elastic.co/t/very-inconsistent-no-results-found-kibana-4-3-0/36430)

<div class="topic-metadata">

**Author:** [@aethos](https://discuss.elastic.co/u/aethos)\
**Replies:** 3\
**Last updated:** [December 18, 2015, 8:27pm UTC](https://discuss.elastic.co/t/very-inconsistent-no-results-found-kibana-4-3-0/36430 "2015-12-18T20:27:50Z")

</div>

Hey all, having a very frustrating issue with an upgraded install and Kibana 4.3.0. I frequently get: There's a lot of documents in the logstash index and if I refresh the window results come up. But if I try to do a …

---

## [\[BUG?\] Cookies are invalidated after some time](https://discuss.elastic.co/t/bug-cookies-are-invalidated-after-some-time/34252)

<div class="topic-metadata">

**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\
**Replies:** 6\
**Last updated:** [December 18, 2015, 5:27pm UTC](https://discuss.elastic.co/t/bug-cookies-are-invalidated-after-some-time/34252 "2015-12-18T17:27:48Z")

</div>

Scenario: cookies on the browser are cleared Kibana is accessed no activity with kibana for some time any new request to kibana from the same browser yields the message {"statusCode":400,"error":"Bad Request","message…

---

## [Regarding Kibana Plugins](https://discuss.elastic.co/t/regarding-kibana-plugins/37475)

<div class="topic-metadata">

**Author:** [@vivc](https://discuss.elastic.co/u/vivc)\
**Replies:** 3\
**Last updated:** [December 18, 2015, 4:36pm UTC](https://discuss.elastic.co/t/regarding-kibana-plugins/37475 "2015-12-18T16:36:04Z")

</div>

I've come up with a following requirement. Please confirm if it's feasible to implement in Kibana. Is it possible open the log files from kibana interface to find the context of failures in the logs. Need to find the…

---

## [Kibana Service will not start](https://discuss.elastic.co/t/kibana-service-will-not-start/37375)

<div class="topic-metadata">

**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\
**Replies:** 9\
**Last updated:** [December 18, 2015, 4:33pm UTC](https://discuss.elastic.co/t/kibana-service-will-not-start/37375 "2015-12-18T16:33:02Z")

</div>

Hello I have some problem when trying to connect to my Kibana via localhost on the host. I get the error Bad Gateway 502. And the services Kibana will not start at all. The logs in /var/log/kibana/kibana.stderr show :…

---

## [Kibana 4 upgrade?](https://discuss.elastic.co/t/kibana-4-upgrade/37240)

<div class="topic-metadata">

**Author:** [@Thamizharasu](https://discuss.elastic.co/u/Thamizharasu)\
**Replies:** 4\
**Last updated:** [December 18, 2015, 8:23am UTC](https://discuss.elastic.co/t/kibana-4-upgrade/37240 "2015-12-18T08:23:22Z")

</div>

We have our application running with Kibana 3. Since the earlier version of Kibana available with Tomcat bundle we shipped the required files along with our product. But the latest version of Kibana 4 is not in the ca…

---

## [Kibana 4.3 sending x-Forwarded-For:127.0.0.1 , even if i am not using any load balancer ,Is it a desired behavior](https://discuss.elastic.co/t/kibana-4-3-sending-x-forwarded-for-127-0-0-1-even-if-i-am-not-using-any-load-balancer-is-it-a-desired-behavior/37297)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 1\
**Last updated:** [December 17, 2015, 10:28pm UTC](https://discuss.elastic.co/t/kibana-4-3-sending-x-forwarded-for-127-0-0-1-even-if-i-am-not-using-any-load-balancer-is-it-a-desired-behavior/37297 "2015-12-17T22:28:11Z")

</div>

I am using Kibana 4.3.0 with ES 2.1 and I can see kibana is sending x-Forwarded-for : 127.0.0.1 in the request header to elasticsearch even though if i am not using any load balancer . Can you please confirm if its a des…

---

## [Create Kibana visualizaion using Serial Diff Aggregation](https://discuss.elastic.co/t/create-kibana-visualizaion-using-serial-diff-aggregation/37502)

<div class="topic-metadata">

**Author:** [@lessio](https://discuss.elastic.co/u/lessio)\
**Replies:** 3\
**Last updated:** [December 17, 2015, 8:20pm UTC](https://discuss.elastic.co/t/create-kibana-visualizaion-using-serial-diff-aggregation/37502 "2015-12-17T20:20:13Z")

</div>

I need to create a new visualization on Kibana using the Serial Diff feature. On this link shows the same graph that I would like to do https://www.elastic.co/guide/en/elasticsearch/reference/2.0/search-aggregations-pi…

---

## [Kibana search with partial match](https://discuss.elastic.co/t/kibana-search-with-partial-match/37468)

<div class="topic-metadata">

**Author:** [@ayasha88](https://discuss.elastic.co/u/ayasha88)\
**Replies:** 1\
**Last updated:** [December 17, 2015, 7:49pm UTC](https://discuss.elastic.co/t/kibana-search-with-partial-match/37468 "2015-12-17T19:49:55Z")

</div>

Hi I have a field called ipclient inside my properties. It is of string type because I was not able to change its type and by default if you create the index with log4net.elasticsearch it is set as string. Anyway now I…

---

## [Kibana.bat errors on Windows 10](https://discuss.elastic.co/t/kibana-bat-errors-on-windows-10/34233)

<div class="topic-metadata">

**Author:** [@PaulBrown](https://discuss.elastic.co/u/PaulBrown)\
**Replies:** 5\
**Last updated:** [December 17, 2015, 5:37pm UTC](https://discuss.elastic.co/t/kibana-bat-errors-on-windows-10/34233 "2015-12-17T17:37:34Z")

</div>

HI, I'm new to all this Elastic Search and Kibana technology but have started to look at it. I've downloaded and installed ElasticSearch-2.0.0 and that's working fine. To go with this I've downloaded Kibana-4.2.0-wi…

---

## [Kibana Compare filter](https://discuss.elastic.co/t/kibana-compare-filter/37238)

<div class="topic-metadata">

**Author:** [@binurajps](https://discuss.elastic.co/u/binurajps)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 4:04am UTC](https://discuss.elastic.co/t/kibana-compare-filter/37238 "2015-12-17T04:04:16Z")

</div>

Hi Team, I have two field as follows: Test\_SessionID Test1\_SessionID I would like to compare these field using Kibana filter like Test\_SessionID = Test1\_SessionID. This is possible? Regards, Binuraj

---

## [How can I export visualizations without exposing sensative data within kibana?](https://discuss.elastic.co/t/how-can-i-export-visualizations-without-exposing-sensative-data-within-kibana/37371)

<div class="topic-metadata">

**Author:** [@Chris\_Salvi](https://discuss.elastic.co/u/Chris_Salvi)\
**Replies:** 1\
**Last updated:** [December 17, 2015, 3:42am UTC](https://discuss.elastic.co/t/how-can-i-export-visualizations-without-exposing-sensative-data-within-kibana/37371 "2015-12-17T03:42:23Z")

</div>

I want to build a real-time dashboard based on data I have stored within Elasticsearch, but my colleague is wary of this because he doesnt want to expose all the data within kibana. Is there a way to safely isolate th…

---

## [Why the unique count of some item is larger than count in table chart of kibana?](https://discuss.elastic.co/t/why-the-unique-count-of-some-item-is-larger-than-count-in-table-chart-of-kibana/34374)

<div class="topic-metadata">

**Author:** [@zpli](https://discuss.elastic.co/u/zpli)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 1:04am UTC](https://discuss.elastic.co/t/why-the-unique-count-of-some-item-is-larger-than-count-in-table-chart-of-kibana/34374 "2015-12-17T01:04:47Z")

</div>

As shown in the first fig.1, the unique count of group\_id is larger than the count of logs. When search the logs with the same filters, I find only 8 logs (in fig.2), why the unique count of group\_id is 9 ? fig.1 fig…

---

## [Storing and resolving URLs](https://discuss.elastic.co/t/storing-and-resolving-urls/37135)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 6\
**Last updated:** [December 16, 2015, 10:41pm UTC](https://discuss.elastic.co/t/storing-and-resolving-urls/37135 "2015-12-16T22:41:23Z")

</div>

Kibana 4.3 and ES 2.1, LS 2.0 and SH2.0 Is there a way to render small images in Kibana whose URLs are store/retrieved from ES?! Example - a small image url of a thumbnail is stored in one of the doucments. How coul…

---

## [Error after upgrading to Kibana 4.2 - Full page does not render](https://discuss.elastic.co/t/error-after-upgrading-to-kibana-4-2-full-page-does-not-render/37258)

<div class="topic-metadata">

**Author:** [@fetzilla](https://discuss.elastic.co/u/fetzilla)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 8:06pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-kibana-4-2-full-page-does-not-render/37258 "2015-12-16T20:06:32Z")

</div>

Here's the error log from Kibana FATAL CLI ERROR YAMLException: can not read a block mapping entry; a multiline key may not be an implicit key at line 73, column 1: ^ at generateError (/opt/kibana/node\_modules/js-yam…

---

## [Kibana Visualize: Unknown Error](https://discuss.elastic.co/t/kibana-visualize-unknown-error/37017)

<div class="topic-metadata">

**Author:** [@ananthanaidu](https://discuss.elastic.co/u/ananthanaidu)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 7:09pm UTC](https://discuss.elastic.co/t/kibana-visualize-unknown-error/37017 "2015-12-16T19:09:35Z")

</div>

Hello, Can you please help to fix this attached error,

---

## [Metric - average count per bucket (one value for all buckets)](https://discuss.elastic.co/t/metric-average-count-per-bucket-one-value-for-all-buckets/37140)

<div class="topic-metadata">

**Author:** [@hronecviktor](https://discuss.elastic.co/u/hronecviktor)\
**Replies:** 1\
**Last updated:** [December 16, 2015, 5:22pm UTC](https://discuss.elastic.co/t/metric-average-count-per-bucket-one-value-for-all-buckets/37140 "2015-12-16T17:22:13Z")

</div>

Hi everybody, My elasticsearch index contains field called "sr\_id" - an ID of a user. Lots of records for each sr\_id. I need to create a "Metric" visualization to show how many records are related to a user on average…

---

## [Kibana 4.1.1 unable to map timestamp which is in UNIX Epoch format](https://discuss.elastic.co/t/kibana-4-1-1-unable-to-map-timestamp-which-is-in-unix-epoch-format/28244)

<div class="topic-metadata">

**Author:** [@cloud\_admin](https://discuss.elastic.co/u/cloud_admin)\
**Replies:** 8\
**Last updated:** [December 16, 2015, 3:57pm UTC](https://discuss.elastic.co/t/kibana-4-1-1-unable-to-map-timestamp-which-is-in-unix-epoch-format/28244 "2015-12-16T15:57:54Z")

</div>

Hi Team, I have recently upgraded my Kibana from 3 to 4.1.1, my nginx access logs has Epoch Time format like 1434589605.318 and kibana is not able to detect this time stamp field, hence I am not able to segregate the …

---

## [Marvel Problem with some dashboards](https://discuss.elastic.co/t/marvel-problem-with-some-dashboards/1324)

<div class="topic-metadata">

**Author:** [@ChrisMark](https://discuss.elastic.co/u/ChrisMark)\
**Replies:** 4\
**Last updated:** [December 16, 2015, 1:28pm UTC](https://discuss.elastic.co/t/marvel-problem-with-some-dashboards/1324 "2015-12-16T13:28:36Z")

</div>

Ηello guys, i had my marvel page working fine some hours ago, but now i have a problem. The problem is that Overview page as well as Shard Allocation page cannot be loaded. In overview page i take empty diagramms and …

---

## [Marvel not showing data](https://discuss.elastic.co/t/marvel-not-showing-data/31918)

<div class="topic-metadata">

**Author:** [@willyaranda](https://discuss.elastic.co/u/willyaranda)\
**Replies:** 1\
**Last updated:** [December 16, 2015, 11:07am UTC](https://discuss.elastic.co/t/marvel-not-showing-data/31918 "2015-12-16T11:07:34Z")

</div>

Hi there! I just installed Marvel in my cluster, consisting in 3 data nodes and 3 masters. Data from Marvel is flowing to the system, as I can see the marvel index has around 700 documents, but when I open the interf…

---

## [Level alerts in colors](https://discuss.elastic.co/t/level-alerts-in-colors/37126)

<div class="topic-metadata">

**Author:** [@Maxim\_Surdu](https://discuss.elastic.co/u/Maxim_Surdu)\
**Replies:** 2\
**Last updated:** [December 16, 2015, 7:12am UTC](https://discuss.elastic.co/t/level-alerts-in-colors/37126 "2015-12-16T07:12:09Z")

</div>

Hi everyone, I am new in Ossec, i configure ossec-server and ossec agent, all is working formidable! but how can i configure the KIbana to show me the level alerts in colors, like if level of alert is 15 to show in KIB…

---

## [Any idea on Kibana Request Per Second low to 0.43? Thanks!](https://discuss.elastic.co/t/any-idea-on-kibana-request-per-second-low-to-0-43-thanks/37251)

<div class="topic-metadata">

**Author:** [@shilong](https://discuss.elastic.co/u/shilong)\
**Replies:** 1\
**Last updated:** [December 15, 2015, 8:27pm UTC](https://discuss.elastic.co/t/any-idea-on-kibana-request-per-second-low-to-0-43-thanks/37251 "2015-12-15T20:27:18Z")

</div>

Hi This is my status for Kibana status, it looks too bad, I am wondering how come it going with this way? Any one can help answer base on your experience. Also, on the marvel, it shows that the horrible number 5/10M.…

---

## [Graphics labels](https://discuss.elastic.co/t/graphics-labels/37114)

<div class="topic-metadata">

**Author:** [@Max\_Just](https://discuss.elastic.co/u/Max_Just)\
**Replies:** 4\
**Last updated:** [December 15, 2015, 6:46pm UTC](https://discuss.elastic.co/t/graphics-labels/37114 "2015-12-15T18:46:07Z")

</div>

Hi, is it poissible to create a label on graph? Not legend in right side, but label on graph...

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1089)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1091)
